Resource, Reconciliation, Provisioning and Connector in Oracle Identity Manager #OIM

1. Resources: In OIM’s terminology resource is external source like ERP, CRM, mainframes or LDAP Servers; to which OIM connects for Provisioning and Reconciliation

2) Reconciliation – Process of comparing and synchronizing accounts information in target system with OIM. Data flows into Oracle Identity Manager from External Source.
Type of OIM reconciliation – Two Type
a) Trusted Source Reconciliation – External Source is authoritative source (eg. HR), External Source drives creation, modification and deletion of user in Oracle Identity Manager.
b) Target resource reconciliation – external Source is non-authoritative source with which user is already provisioned.

Events in Reconciliation – Three type of events
a) Reconciliation Insert – OIM detects a user which does not exists in OIM
b) Reconciliation Update – OIM detects a modification to user  which already exists in OIM
c) Reconciliation Delete – OIM decides that user present in OIM should be removed

3) Provisioning Process to create, modify or delete user information in target resource is initiated by OIM. Data flow is from OIM to resource (external source)
Type of Provisioning in OIM
a) Day-one provisioning
– involves initial creation of access privileges to resource(external source) for users and removal of these privileges.
b) Day-two provisioning – modification of privileges with resources (external source) based on business needs.

.

4) OIM Connector – is a container that holds information that OIM needs to reconcile user identity with external source and provision user with target resource.  Mandatory components of connector are IT Resource Type (One and Only Resource Type per connector), IT Resource (One IT resource per resource), Process Form, Process Task Adapter, Resource Object, Provisioning Process, Process Task. More on connectors and its components here

About the Author Atul Kumar

Oracle ACE, Author, Speaker and Founder of K21 Technologies & K21 Academy : Oracle Gold Partner specialising in Design, Implement, and Trainings.

follow me on:

Leave a Comment:

20 comments
Paul says July 16, 2010

Hi Atul,

I have a question not related to this topic.
But thought of asking you this question anyway.

By any chance do you have any article on Oracle i-REC (iRecrutment)?

Best Regards.

Reply
Atul Kumar says July 18, 2010

@ Paul,
For iRec in R12 check http://download.oracle.com/docs/cd/B53825_05/current/html/docset.html

and seach for iRec

Reply
» Oracle Identity Manager (OIM) Connector for Oracle Internet Directory (OID) : Architecture and Overview Online Apps DBA: One Stop Shop for Apps DBA’s says August 26, 2010

[…] Oracle Identity Manager (OIM) : is Identity Provisioning and Reconciliation software . To know more about provisioning and reconciliation in OIM click here […]

Reply
Itzel says August 23, 2011

Hi Atul,

I have a question not related to this topic.
Well more o less.

We have a conflict with Siebel. We are executing the process of reconciliation, the process takes about 30 minutes and concludes with an execute status of “Success”, apparently is bringing the information correctly from Siebel, but nothing is written in the OIM.

Any idea what happens?

Regards

Reply
praveen sharma says February 20, 2012

Global Sequence Number Corruption had happend manaully we have deleted the dublicate value can you guide us in such way that it can be permanent solution to not to encounter this what sought of measures can be done

Reply
» Oracle EBS Integration with OIM (Identity Manager) : Things you should know Online Apps DBA: One Stop Shop for Apps DBA’s says March 29, 2012

[…] Manager (OIM) for User Provisioning and Reconciliation. OIM is Identity Management and Identity Provisioning/Reconciliation software from Oracle. OIM 11g Architecture & Administration is also covered in my book Oracle […]

Reply
avinash says July 19, 2012

hi Atul,

I am trying to generate oim user in to flatfile when user are created or modified or disabled.

regards
avinash

Reply
avinash says July 19, 2012

hi Atul,

I am trying to generate oim user in to flatfile or csv file when user are created or modified or disabled.
it is possible or not. if possible how?? pls forward any document..

regards
avinash

Reply
Vivek Sharma says October 3, 2012

Hi Atul,

I am referring to your book for EBS integration with OAM, and am on page 93. I can create users in EBS and they show up on OID, but the ones created in OID don;t show up in EBS. I have tested telnet connections both ways on all related OID and DB ports, and also the provisioning log, but can’t seem to resolve the issue?
Pl help!

Reply
    Atul Kumar says October 7, 2012

    @ Vivek Sharma,
    Check what comes in DIP log file. In eBook there is step to enable debug in EBS via profile option . Do that and check FND_LOG_MESSAGES

    Reply
mike says October 3, 2012

hi Atul,
I have an OIM11.1.1.5.0 provisioning problem and hope you can make comments on.
the resource is P6 (Oracle Primavera P6), Oracle provides the OIM11g P6 connector for provisioning OIM users to P6. I have imported the connector to the OIM. it is shown in the IT Resource as “Primavera P6 EPPM Resource” in the OIM. I tried to test the provisioning with one user. What I did was : creating a provision resource request for the user by assign the P6 resource. The request failed with the error. What would be the problem(s)?
TIA

IAM-2050014:An error occurred while initiating approvals for request oracle.iam.platform.workflowservice.exception.IAMWorkflowException: Tasklist mapping failed for workflowdefinition: default/DefaultRequestApproval!1.0 due to The task ApprovalTask specified for the workflow composite default/DefaultRequestApproval!1.0 is not valid. The corresponding error message is {1}.

Reply
» OIM – AD integration : Active Directory Group Lookup Recon failed with error Remote Framework Key is invalid Online Apps DBA: One Stop Shop for Apps DBA’s says October 26, 2012

[…] For Connector basics : Resources, Reconciliation, and Provisioning click here […]

Reply
» Provision resource “Microsoft Exchange” to user in OIM : Status remains in Provisioning : Part I Online Apps DBA: One Stop Shop for Apps DBA’s says October 31, 2012

[…] For Connector basics : Resources, Reconciliation, and Provisioning click here […]

Reply
zambrtp says March 3, 2014

I was wondering if you had a bulk delete script we need to clean up our non-prod user OIM 11gR2 repository without harming any other tables dealing with the system . We really need to start with clean user base. ( no users or user artifacts)

Reply
subhas says November 13, 2014

Hi Atul,

We have this intermittent issue where, a user is getting disabled In OIM. Its accounts getting disabled and also end date is populated. But the user status in OIM reflects as Active. This is not happening for all the users. but intermittently.

Reply
amar.a.kolhapuri@gmail.com says December 9, 2014

Hi Atul,
We have 2 OIM manage servers(Cluster) with PS2 upgraded .We are in to load testing where we are running 7k users .Now the test looks good with 5k users but with 7K users oimOperationsDb is getting overloaded .
I have below queries.
We have only 2 (OIM,OAM,OAAM,OUD) manage servers and we have 18 portal servers where the application is deployed.
Do we need to scale up OIM domain if Yes will that work as this will be pointing to same schema and there will be chances of overload.
We have made the changes as per the OIM tuning guide from oracle both on DB as well as on OIM servers.

Pease let me know your inputs.
Thanks
AK

Reply
chintu says August 18, 2015

i’m expecting basics from this site with general examples

Reply
Add Your Reply