I recently integrated OIM with OID using LDAPSync<\/strong> and then configured OIM to\u00a0reconcile users from identity store<\/a> (OID in my case<\/span>). As part of this integration I also successfully executed scheduled\u00a0job\u00a0“LDAP \u00a0User Create and Update Full Reconciliation”<\/a>\u00a0(This scheduled job is required to run once that will bring all existing users from OID in to OIM<\/span>). As part of this Job (Full Reconciliation<\/span>), all users in Identity Store (OID or other LDAP Server) should be be synchronized to OIM<\/strong>.<\/p>\n <\/p>\n <\/p>\n In my case even after full user reconciliation<\/strong> (LDAP User Create and Update Full Reconciliation<\/span>), some users like weblogic_idm<\/strong>, oamADMIN<\/strong>, or oamLDAP<\/strong> created as part of OIM\/OAM integration<\/a> were missing in OIM. (more on OIM\/OAM integration here<\/span><\/a> and\u00a0here<\/span><\/a><\/span>)<\/p>\n There were no errors in OIM managed servers logs and scheduled job\u00a0LDAP User Create and Update Full Reconciliation<\/strong> completed with success.<\/p>\n <\/p>\n How to troubleshoot User\/Role synchronization issue in OIM<\/strong> ?<\/p>\n If you hit this or similar problem then configure logging in OIM. There are two type of logging<\/strong> in OIM, ODL (Oracle Diagnostic Logging) and log4j<\/a><\/p>\n Configure ODL for logger xellerate.scheduler<\/strong>\u00a0and xellerate.scheduler.task<\/strong>\u00a0in logging.xml<\/strong><\/p>\n 1.<\/strong> Open file\u00a0$DOMAIN_HOME\/ config\/ fmwconfig\/ servers\/<OIM SERVER>\/logging.xml<\/p>\n and add entry like<\/p>\n <logger name=’XELLERATE.SCHEDULER’ level=’TRACE:32′ useParentHandlers=’false’><\/span> <\/p>\n <\/p>\n 2.<\/strong> Restart OIM Managed Server<\/p>\n 3.<\/strong> Run scheduled job\u00a0LDAP User Create and Update Full Reconciliation<\/p>\n 4.<\/strong>\u00a0Check log file $DOMAIN_HOME\/ servers\/ <oim_server1>\/ logs\/ oim-server1-diagnostic.log<\/strong><\/p>\n In my case error message looks like<\/p>\n ____<\/p>\n [2012-06-08T13:03:18.370+00:00] [oim_server1] [NOTIFICATION] [IAM-5010000] [oracle.iam.reconciliation.impl] [tid: OIMQuartzScheduler_Worker-7] [userId: oiminternal] [ecid: 34eea5fc76281eb7:-4d17507:137cc2d7dca:-8000-0000000000000002,0] [APP: oim#11.1.1.3.0] Generic Information: createEvent Input Data : {uid=weblogic_idm, mail=weblogic_idm, sn=weblogic_idm, cn=weblogic_idm, orclguid=C1CCB6F162029494E0408E51846D40A9, Organization Name=Xellerate Users, OIM User Type=End-User, givenname=weblogic_idm, dn=cn=weblogic_idm, cn=Users,dc=focusthread, dc=com, employeetype=Full-Time}[[<\/span> <\/p>\n [2012-06-12T16:14:27.312+00:00] [oim_server1] [NOTIFICATION] [IAM-0080006] [oracle.iam.platform.kernel.impl] [tid: [ACTIVE].ExecuteThread: ‘1’ for queue: ‘weblogic.kernel.Default (self-tuning)’] [userId: oiminternal] [ecid: 34eea5fc76281eb7:-7b86137: 137cce34de8:-8000-0000000 000000002,0] [APP: oim#11.1.1.3.0] Orchestration process moved to failed stage, and the corresponding error is – {0}[[oracle.iam.platform. kernel.EventFailedException: IAM-3051103: The create operation on user entity failed in action stage.:<\/span> [2012-06-12T16:14:27.553+00:00] [oim_server1] [NOTIFICATION] [IAM-5010006] [oracle.iam.reconciliation.impl] [tid: [ACTIVE].ExecuteThread: ‘1’ for queue: ‘weblogic.kernel.Default (self-tuning)’] [userId: oiminternal] [ecid: 34eea5fc76281eb7:-7b86137:137cce34de8:-8000-0000000000000002,0] [APP: oim#11.1.1.3.0] The following exception occurred: {0}[[oracle.iam.reconciliation. exception.CreateUserException: oracle.iam.platform. kernel.EventFailedException: IAM-3051103:The create operation on user entity failed in action stage.:at oracle.iam.reconciliation. impl.UserHandler.create(UserHandler.java:155)\u00a0at oracle.iam. reconciliation.impl.UserHandler.applyRule(UserHandler.java:91)<\/span> ______<\/p>\n Root Cause<\/strong> : This issue could be for number of reasons, In my case difference between users synchronized to OIM and to those not<\/strong> synchronized with OIM is that some users had attribute email in OID as without .<\/strong> and @\u00a0<\/strong><\/p>\n Fix<\/strong>: Update Attribute email in OID to a valid email address or remove value from attribute email and run Full Reconciliation Job again.<\/p>\n <\/p>\n![\"\"](\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2012\/06\/full_recon.png\" "\\"full_recon\\"")
<\/a><\/p>\n
\n <handler name=’odl-handler’\/><\/span>
\n <handler name=’console-handler’\/><\/span>
\n <\/logger><\/span><logger name=’XELLERATE.SCHEDULER.TASK’ level=’TRACE:32′ useParentHandlers=’false’><\/span>
\n <handler name=’odl-handler’\/><\/span>
\n <handler name=’console-handler’\/><\/span>
\n <\/logger><\/span><\/p>\n![\"\"](\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2012\/06\/logging.png\" "\\"logging\\"")
<\/a><\/p>\n
\n eventAttribs : serialVersionUID:1357809523267688155 dateFormat:yyyy\/MM\/dd HH:mm:ss z changeType:REGULAR eventFinished:true actionDate:null<\/span>
\n ]]<\/span><\/p>\n
\n at oracle.iam.identity.usermgmt. utils.UserManagerUtils. createEventFailedException(UserManagerUtils.java:650)<\/span>
\n at oracle.iam.identity. usermgmt.utils.UserManager Utils.createEventFailedException (UserManagerUtils.java:675)<\/span>
\n at oracle.iam. identity.usermgmt. impl.handlers.create. CreateUserActionHandler.execute (CreateUserActionHandler.java:184)<\/span>
\n at oracle.iam.identity. usermgmt.impl.handlers. create.CreateUserActionHandler. execute(CreateUserActionHandler.java:68)<\/span><\/p>\n
\n at oracle.iam. reconciliation.impl. UserHandler.process (UserHandler.java:66)\u00a0at oracle.iam. reconciliation. impl.ActionEngine. processEvent(ActionEngine.java:19<\/span><\/p>\n
![\"\"](\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2012\/06\/full_recon_2.png\" "\\"full_recon_2\\"")
<\/a><\/p>\n![\"\"](\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2012\/06\/full_recon_3.png\" "\\"full_recon_3\\"")
<\/a><\/p>\n