{"id":523,"date":"2008-06-14T07:40:02","date_gmt":"2008-06-14T11:40:02","guid":{"rendered":"http:\/\/onlineappsdba.com\/index.php\/2008\/06\/14\/user-created-in-apps-11ir1212i-not-sync-to-oid\/"},"modified":"2008-06-14T07:52:22","modified_gmt":"2008-06-14T11:52:22","slug":"user-created-in-apps-11ir1212i-not-sync-to-oid","status":"publish","type":"post","link":"https:\/\/onlineappsdba.com\/index.php\/2008\/06\/14\/user-created-in-apps-11ir1212i-not-sync-to-oid\/","title":{"rendered":"User created in Apps 11i\/R12\/12i not sync to OID"},"content":{"rendered":"

You have E-Business Suite 11i\/R12\/12i Integrated with OID\/SSO (10g AS Infrastructure), \u00a0Integration is one way<\/strong> (Apps\u00a0-> OID<\/strong>) or two way<\/strong> (OID <—> Apps<\/strong>). After few months users complain that they created some users in Apps 11i\/R12<\/strong> (FND_USER) but these users are not created in OID<\/strong>.
\nIn order to troubleshoot such issue, you should know process flow<\/p>\n

User creation process flow\u00a0(Apps to OID) <\/u>
\n<\/strong>1. You create user in Apps and profile option APPS_SSO_IDENTITY<\/strong> & APPS_LDAP_SYNC<\/strong>\u00a0is enabled<\/p>\n

2. DBMS_LDAP<\/strong> will check in OID for password policy<\/strong> (to check, if password supplied during user creation meets password policy at OID)<\/p>\n

3. User creation will\u00a0create business events in Oracle Apps<\/p>\n

4. ODISRV<\/strong> (Oracle Directory Integration Server) will check if any provisioning profile<\/strong> is enabled to\u00a0pull data from\u00a0Apps.<\/p>\n

5.\u00a0OID provisioning server will consume business events from Apps (11i\/R12)
\n\u00a0<\/p>\n

\u00a0 Your first attempt\u00a0should be\u00a0to follow checklist as per metalink note 295606.1 (For 11i) & 380487.1 (For R12\/12i)<\/font><\/p>\n

As per “2.11 Users created in E-Business Suite not propagated to OID<\/strong>” of note 295606.1, you checked and found that
\n–
\nA. <\/strong>E-Business Suite is set to propagate users to OID\u00a0 – Yes
\nB. <\/strong>There are relevant WorkFlow events get created in 11i Workflow Tables – Yes
\nC. <\/strong>Business Event is moved from Pending events to Consumed events – Yes
\nD. <\/strong>ODISRV is running on OID Server – Yes\u00a0 <\/strong>(ODISRV is Directory Integration Daemon used to sync data between OID and Applications or other LDAP Servers) . To know more about OID <\/strong>click here<\/strong><\/a>
\nE. <\/strong>You checked that ApplicationsToOID provisioning profile exists, enabled and no errors – Yes
\nF. <\/strong>Latest event propagation was successful in provisioning profile. – Yes
\nG. <\/strong>You enabled Extra logging in provisioning profile but no error message in provisioning profile. (Done at OID level) – Yes
\nH. <\/strong>You enabled Debug for FND Messages but there was no error message in FND_LOG_MESSAGES table. – Yes<\/strong>Next in section 2.11 says; “As of today, no reports have been filed with successful status and failed provisioning from Apps to OID. If this is the case, provide Oracle Support with all logs”\u00a0
\n<\/font><\/p>\n

<\/strong>Step missing under section 2.11<\/strong> of note\u00a0 295606.1 ( I hope Oracle Support will put this check under section 2.11<\/font>) is to check AppsDN<\/strong> Account password.<\/p>\n

What is this AppDN Account<\/u> ?<\/strong>\u00a0
\nAppsDN is special\u00a0administration account which\u00a0E-Business Suite\u00a0(11i\/R12\/12i) uses to connect to OID for management and administrative tasks when integrating with OID\/SSO. This is user’s password is supplied\u00a0during Apps 11i\/R12 registration with OID\/SSO.
\n–\u00a0<\/u><\/strong><\/p>\n

Where it is AppsDN account stored<\/u><\/strong> ?
\nAppsDN password is stored in E-Business Suite<\/strong>\u00a0& in OID<\/strong>. In OID it is stored under Entry Management -> Default Realm -> Oracle Context -> Products -> EBusiness -> EBusiness Name Used during Registration<\/strong><\/p>\n

Lets assume your OID realm is\u00a0onlineappsdba.com<\/strong> and while registering Apps (11i\/R12) with OID you used application name (-appname ) as VIS11I then this AppsDN account\u00a0should\u00a0be in OID under
\nEntry Management ->\u00a0com ->\u00a0onlineappsdba -> Products -> EBusiness -> VIS11I<\/strong><\/p>\n

<\/u><\/strong><\/p>\n

How to verify if\u00a0AppsDN account is expired<\/u> ?
\n<\/strong>
\nLogin to E-Business Database as apps<\/strong> User and run<\/p>\n

SQL> select fnd_preference.get(‘#INTERNAL’, ‘LDAP_SYNCH’,’USERNAME’) ;<\/p>\n

Out put should be like
\norclApplicationCommonName=”VIS11I”,cn=”EBusiness”,cn=Products, cn=OracleContext,dc=onlineappsdba,dc=com
\n<\/strong>
\nThen find password stored in Apps as
\nSQL> select fnd_preference.eget(‘#INTERNAL’, ‘LDAP_SYNCH’,’EPWD’,’LDAP_PWD’) Password from dual<\/strong>;<\/p>\n

Check out put\u00a0\u00a0in my case its\u00a0 “welcome123”<\/p>\n

Now Verify if Password in OID is same and not expired\u00a0
\n<\/strong>
\nConnect to OID host and issue command like<\/p>\n

$ORACLE_HOME\/bin\/ldapcompare -h oid_host <\/strong>-poid_port<\/strong>\u00a0 \\
\n-D cn=orcladmin -w orcladmin_password<\/strong> \\
\n-b “orclApplicationCommonName=<Apps_Registration><\/strong>, cn=EBusiness,cn=Products,cn=OracleContext,dc=<you_doamin_name><\/strong>” \\
\n-a userpassword -v <password><\/strong><\/p>\n

Like in my case
\n$ORACLE_HOME\/bin\/ldapcompare -h oid1.com<\/strong> -p 389<\/strong>-D cn=orcladmin -w welcome1<\/strong> \\
\n-b “orclApplicationCommonName=VIS11I<\/strong>, cn=EBusiness,cn=Products,cn=OracleContext, dc=onlineappsdba<\/strong>,dc=com<\/strong>” \\
\n-a userpassword -v welcome123<\/strong><\/p>\n

If Password is correct<\/strong>, you will get output like
\n<\/font>The value welcome123 is contained in the attribute userpassword in DN
\norclApplicationCommonName=VIS11I,cn=EBusiness,cn=Products, cn=OracleContext,dc=onlineappsdba,dc=com.<\/p>\n

If Password is wrong<\/strong>, you will get output like
\n<\/font>The value welcome123 is not<\/strong>contained in the attribute userpassword in DN orclApplicationCommonName=VIS11I,cn=EBusiness,cn=Products, cn=OracleContext,dc=onlineappsdba,dc=com.<\/p>\n

If Password is expired<\/strong>, you will get output like
\n<\/font>ldap_compare_s: Invalid credentials
\nldap_compare_s: additional info: Password Policy Error :9000: GSL_PWDEXPIRED_EXCP :Your Password has expired. Please contact the Administrator to change your password.<\/p>\n

<\/u><\/strong><\/p>\n

Why\u00a0AppsDN account expired<\/u><\/strong> ?<\/p>\n

In OID, there is default password policy which locks accounts whose passwords are not changed in last 60 days.<\/p>\n

<\/u><\/strong><\/p>\n

How to prevent this happening in future<\/u><\/strong> ?<\/p>\n

Option 1<\/strong>: Create another policy in OID and select option “Not to lock account<\/strong>” and assign new password policy to Administrative accounts like AppsDN<\/strong> & orcladmin<\/strong>.\u00a0 (Note : Multiple Password Policy is supported from OID 10.1.4 and higher<\/font>)\u00a0<\/p>\n

Option 2<\/strong>:\u00a0Reset\u00a0AppsDn<\/strong>password every 59 days (Depending on your password policy you can reset password to same old value, reseting password unlocks account in case account is locked).\u00a0
\nNote1* If you are changing AppsDN password then you have to register Apps again with OID.
\nNote2* If you are changing password, password policy<\/strong> option (User should change password on first login<\/strong>) should be disabled<\/strong> during reset of AppsDN<\/strong> password<\/font><\/p>\n

Related Metalink Notes<\/u><\/strong><\/p>\n

437697.1<\/strong>\u00a0– How to check\/change the eBiz AppsDN user password in AS10g OID
\n459729.1 –<\/strong>\u00a0The OID test in the SSO diagnostics page throws an error: “Application container is not created properly”
\n401836.1 –<\/strong>\u00a0 Gsl_pwdexpired_excp: Your Password Has Expired Ora-31202
\n380487.1\u00a0–<\/strong> Oracle Application Server 10g with Oracle E-Business Suite Release 12 Troubleshooting Guide
\n295606.1\u00a0 Oracle Application Server 10g with Oracle E-Business Suite Release 11i Troubleshooting<\/p>\n","protected":false},"excerpt":{"rendered":"

You have E-Business Suite 11i\/R12\/12i Integrated with OID\/SSO (10g AS Infrastructure), \u00a0Integration is one way (Apps\u00a0-> OID) or two way […]<\/p>\n","protected":false},"author":115,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[42],"tags":[],"class_list":["post-523","post","type-post","status-publish","format-standard","hentry","category-troubleshooting"],"yoast_head":"\nUser created in Apps 11i\/R12\/12i not sync to OID -<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/onlineappsdba.com\/index.php\/2008\/06\/14\/user-created-in-apps-11ir1212i-not-sync-to-oid\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"User created in Apps 11i\/R12\/12i not sync to OID -\" \/>\n<meta property=\"og:description\" content=\"You have E-Business Suite 11i\/R12\/12i Integrated with OID\/SSO (10g AS Infrastructure), \u00a0Integration is one way (Apps\u00a0-> OID) or two way […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/onlineappsdba.com\/index.php\/2008\/06\/14\/user-created-in-apps-11ir1212i-not-sync-to-oid\/\" \/>\n<meta property=\"article:published_time\" content=\"2008-06-14T11:40:02+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2008-06-14T11:52:22+00:00\" \/>\n<meta name=\"author\" content=\"Masroof Ahmad\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Masroof Ahmad\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2008\/06\/14\/user-created-in-apps-11ir1212i-not-sync-to-oid\/\",\"url\":\"https:\/\/onlineappsdba.com\/index.php\/2008\/06\/14\/user-created-in-apps-11ir1212i-not-sync-to-oid\/\",\"name\":\"User created in Apps 11i\/R12\/12i not sync to OID -\",\"isPartOf\":{\"@id\":\"https:\/\/onlineappsdba.com\/#website\"},\"datePublished\":\"2008-06-14T11:40:02+00:00\",\"dateModified\":\"2008-06-14T11:52:22+00:00\",\"author\":{\"@id\":\"https:\/\/onlineappsdba.com\/#\/schema\/person\/909a876ed58d400faf82caf81d61bfdb\"},\"breadcrumb\":{\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2008\/06\/14\/user-created-in-apps-11ir1212i-not-sync-to-oid\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/onlineappsdba.com\/index.php\/2008\/06\/14\/user-created-in-apps-11ir1212i-not-sync-to-oid\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2008\/06\/14\/user-created-in-apps-11ir1212i-not-sync-to-oid\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/onlineappsdba.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"User created in Apps 11i\/R12\/12i not sync to OID\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/onlineappsdba.com\/#website\",\"url\":\"https:\/\/onlineappsdba.com\/\",\"name\":\"\",\"description\":\"Oracle Implementation & Training Experts\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/onlineappsdba.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/onlineappsdba.com\/#\/schema\/person\/909a876ed58d400faf82caf81d61bfdb\",\"name\":\"Masroof Ahmad\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/onlineappsdba.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/10f9db7bdbbd7f9ccfbe9b2d208e5978fc28315e9c704383e639a926ea0fce5f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/10f9db7bdbbd7f9ccfbe9b2d208e5978fc28315e9c704383e639a926ea0fce5f?s=96&d=mm&r=g\",\"caption\":\"Masroof Ahmad\"},\"url\":\"https:\/\/onlineappsdba.com\/index.php\/author\/masroof\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"User created in Apps 11i\/R12\/12i not sync to OID -","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/onlineappsdba.com\/index.php\/2008\/06\/14\/user-created-in-apps-11ir1212i-not-sync-to-oid\/","og_locale":"en_US","og_type":"article","og_title":"User created in Apps 11i\/R12\/12i not sync to OID -","og_description":"You have E-Business Suite 11i\/R12\/12i Integrated with OID\/SSO (10g AS Infrastructure), \u00a0Integration is one way (Apps\u00a0-> OID) or two way […]","og_url":"https:\/\/onlineappsdba.com\/index.php\/2008\/06\/14\/user-created-in-apps-11ir1212i-not-sync-to-oid\/","article_published_time":"2008-06-14T11:40:02+00:00","article_modified_time":"2008-06-14T11:52:22+00:00","author":"Masroof Ahmad","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Masroof Ahmad","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/onlineappsdba.com\/index.php\/2008\/06\/14\/user-created-in-apps-11ir1212i-not-sync-to-oid\/","url":"https:\/\/onlineappsdba.com\/index.php\/2008\/06\/14\/user-created-in-apps-11ir1212i-not-sync-to-oid\/","name":"User created in Apps 11i\/R12\/12i not sync to OID -","isPartOf":{"@id":"https:\/\/onlineappsdba.com\/#website"},"datePublished":"2008-06-14T11:40:02+00:00","dateModified":"2008-06-14T11:52:22+00:00","author":{"@id":"https:\/\/onlineappsdba.com\/#\/schema\/person\/909a876ed58d400faf82caf81d61bfdb"},"breadcrumb":{"@id":"https:\/\/onlineappsdba.com\/index.php\/2008\/06\/14\/user-created-in-apps-11ir1212i-not-sync-to-oid\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/onlineappsdba.com\/index.php\/2008\/06\/14\/user-created-in-apps-11ir1212i-not-sync-to-oid\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/onlineappsdba.com\/index.php\/2008\/06\/14\/user-created-in-apps-11ir1212i-not-sync-to-oid\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/onlineappsdba.com\/"},{"@type":"ListItem","position":2,"name":"User created in Apps 11i\/R12\/12i not sync to OID"}]},{"@type":"WebSite","@id":"https:\/\/onlineappsdba.com\/#website","url":"https:\/\/onlineappsdba.com\/","name":"","description":"Oracle Implementation & Training Experts","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/onlineappsdba.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/onlineappsdba.com\/#\/schema\/person\/909a876ed58d400faf82caf81d61bfdb","name":"Masroof Ahmad","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/onlineappsdba.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/10f9db7bdbbd7f9ccfbe9b2d208e5978fc28315e9c704383e639a926ea0fce5f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/10f9db7bdbbd7f9ccfbe9b2d208e5978fc28315e9c704383e639a926ea0fce5f?s=96&d=mm&r=g","caption":"Masroof Ahmad"},"url":"https:\/\/onlineappsdba.com\/index.php\/author\/masroof\/"}]}},"_links":{"self":[{"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/posts\/523","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/users\/115"}],"replies":[{"embeddable":true,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/comments?post=523"}],"version-history":[{"count":0,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/posts\/523\/revisions"}],"wp:attachment":[{"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/media?parent=523"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/categories?post=523"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/tags?post=523"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}