OIA-OIM Integration : Users not sync’d from OIM to OIA : ORA-20003: Account ID property is not defined OIM_PKG_OIA_INTEGRATION

If you have integrated Oracle Identity Manager (OIM) with Oracle Identity Analytics (OIA) as mentioned here and hitting problem with User Sync  from OIM to OIA then check my previous post here to troubleshoot and log location.

In order to Synchronize users from OIM to OIA , you run Import Job “Import Users, Accounts, User Role Memberships and Entitlements” in OIA.

I encountered same issue again recently (check steps on how to troubleshoot here ) but this time error in OIM out log (no issues reported in OIA logs) is

___

<03-Sep-2013 13:57:16 o’clock UTC> <Error> <XELLERATE.SERVER> <BEA-000000> <SQLException occured while performing data collection for the session urn:uuid:587448AFB91F160 DCE1378303023 1643994 java.sql. SQLException: ORA-20003: Account ID property is not defined ORA-06512: at “DEV.OIM_PKG_OIA_INTEGRATION”, line 1392 ORA-06512: at line 1

at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:457)
at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:405)

____

If you hit error like above “ORA-20003: Account ID property is not defined ORA-06512” in OIM logs at time of Import Job then ensure that for all Target Applications integrated with OIM (like Active Directory, or Exchange, or Oracle E-Business Suite), Parent Process Form and Child Process Form are updated like below

  • For child process form related to Target Application, create new version and add two property Entitlement=true and OIAParentAttribute=true (ensure to make new version of child process form ACTIVE)
  • For parent process form related to Target Application, create new version and add property ITResource=true for (ITResourceLookupField) and AccountName=true for User ID (TextField) (ensure to make new version of parent process form ACTIVE)
  • Verify that Parent & Child Process Forms are latest updated version and are ACTIVE

For more information on what to update in OIM process form check OIA-OIM integration guide

Root Cause & Fix: In my case , additional Target Application (Microsoft Exchange) was added to OIM and users were provisioned to this target application via OIM however In Parent (UD_EXCHANGE) & Child (UD_EX_CH) Process Form of Target Application (in OIM), additional property was not added .

 

 

 

About the Author Masroof Ahmad

Leave a Comment:

6 comments
Auth says May 8, 2014

HI, Just wanted to check if any one can help me to give me some inputs on how to configure test data for testing OIM-OIA integration- Thank you

Reply
    Atul Kumar says May 8, 2014

    @ Auth, To check OIM-OIA sync is working, create a user/role in OIM and ensure that you can see this in OIA identity warehouse (if not then check scheduled job). Similarly assign user to role in OIA or role modification and after approval of change, it must go to OIM. For test data , you can load data manually and if you have lot of records then use bulkload.

    Reply
Auth says May 8, 2014

HI – Need some help on configuring the test data to test OIM- OIA integration- we have the target resources like AD ,RACF and will get data from them too.– Thank you

Reply
Auth says May 9, 2014

Thank you – would you please let me know what will be the steps to validate the rolemining scenarios in OIA

Reply
Atul Kumar says May 9, 2014

@ Auth,
I am afraid that will take a bit to explain. We provide consultancy at fixed price for big tasks like these . Contact us ( http://onlineappsdba.com/index.php/contact-us/ ) if you are interested for consultancy or showing you how to run scenarios 1 day session to explain what you want in OIA

Reply
Auth says May 9, 2014

Hi – Sure will contact you- I would like to go for thr one day session.

Reply
Add Your Reply