This post is from our demo environment to configure Segregation of Duties (SoD) in Oracle eBusiness Suite (R12) using GRC/OAACG/OIM. Contact Us if you are interested in demo of GRC/OAACG/OIM/EBS integration for SoD.
I discussed about Oracle EBS (R12/11i) integration with Oracle Identity Manager(OIM) here, and two type of connectors available for EBS integration are
a) EBS UM Connector : User Management to provisioning Accounts in EBS (FND_USER)
b) EBS ER Connector : Employee Reconciliation to create users in OIM from EBS EMployee record (PER_ALL_PEOPLE_F).
Before EBS Responsibility (treated as entitlement in OIM) can be provisioned via OIM, these responsibility must be visible in OIM as lookup. Schedule Job lookup of EBS Responsibility fethches these responsibility from EBS and store them as lookup in OIM. In this post I am going to share an issue I encountered in EBS-UM connector while running schedule job lookup of EBS Responsibility.
.
Schedule job failed with error in OIM logs as
_______
<Apr 22, 2014 11:26:22 PM BST> <Error> <OIMCP.EBSUM> <BEA-000000> <====================================================>
<Apr 22, 2014 11:26:22 PM BST> <Error> <OIMCP.EBSUM> <BEA-000000> <oracle.iam.connectors.ebs.usermgmt.tasks.UserMgmtLookupReconciliationTask : initializeAndValidateTaskParams : Please provide a valid value to Scheduled Task attribute: IT Resource Name>
<Apr 22, 2014 11:26:22 PM BST> <Error> <OIMCP.EBSUM> <BEA-000000> <====================================================
>
<Apr 22, 2014 11:26:22 PM BST> <Error> <OIMCP.EBSUM> <BEA-000000> <================= Start Stack Trace =======================>
<Apr 22, 2014 11:26:22 PM BST> <Error> <OIMCP.EBSUM> <BEA-000000> <oracle.iam.connectors.ebs.usermgmt.tasks.UserMgmtLookupReconciliationTask : init>
<Apr 22, 2014 11:26:22 PM BST> <Error> <OIMCP.EBSUM> <BEA-000000> <Invalid Schedule Task Parameter>
<Apr 22, 2014 11:26:22 PM BST> <Error> <OIMCP.EBSUM> <BEA-000000> <Description : Invalid Schedule Task Parameter>
<Apr 22, 2014 11:26:22 PM BST> <Error> <OIMCP.EBSUM> <BEA-000000> <oracle.iam.connectors.common.ConnectorException: Invalid Schedule Task Parameter
at oracle.iam.connectors.ebs.usermgmt.tasks.UserMgmtLookupReconciliationTask.init(Unknown Source)
at com.thortech.xl.scheduler.tasks.SchedulerBaseTask.execute(SchedulerBaseTask.java:382)
Caused By: oracle.iam.connectors.common.ConnectorException: Invalid Schedule Task Parameter
at oracle.iam.connectors.ebs.usermgmt.tasks.UserMgmtLookupReconciliationTask.init(Unknown Source)
_______
Fix is to populate two parameters of scheduled job (IT Resource Name and Query Property File)
This schedule job uses a properties file ebsUMLookupQuery.properties (that comes as part of EBS-UM connector). This properties file has entry like below to get list of all the responsibility in EBS
____
Lookup.EBS.Application=SELECT fa.application_id AS CODE, fa.application_short_name AS DECODE FROM fnd_application fa
Lookup.EBS.UMX.Roles=SELECT (CONCAT(fa.application_id || ‘~’, b.name)) AS CODE, (b.display_name) AS DECODE FROM fnd_application fa, wf_local_roles b WHERE b.orig_system = ‘UMX’ AND b.status = ‘ACTIVE’ AND fa.application_short_name = b.owner_tag
Lookup.EBS.Responsibility=SELECT (CONCAT(fa.application_id || ‘~’, fr.responsibility_id)) AS CODE, fr.responsibility_name AS DECODE FROM fnd_application fa, fnd_responsibility_tl fr WHERE fa.application_id = fr.application_id
Lookup.EBS.SecurityGroup=SELECT security_group_id AS CODE, security_group_key AS DECODE FROM fnd_security_groups
_____
Fix is to populate two parameters of scheduled job (IT Resource Name and Query Property File)
Contact Us if you are interested in demo of OIM/EBS integration or integration of OIM/EBS/GRC.