Thursday, October 16, 2014

Creating a Disconnected Resource

Description: Disconnected resources are targets for which there is no connector. SOA is required to be running for provisioning a disconnected resource. This post will show you how to create a disconnected resource and setup entitlements for a disconnected resource.
Tested On:  Oracle Identity Manager 11.1.2.2.0
Reference: Oracle® Fusion Middleware Administrator's Guide for Oracle Identity Manager11g Release 2 (11.1.2.2.0): Managing Disconnected Resources


Disconnected Resource Creation


1. Log in to Identity System Administration page (HOSTNAME:PORT/sysadmin).





2. Click "Sandboxes" located on the top right of the home page and create an active sandbox.





3. Click "Application Instances" under "Configuration" on the left side pane and then create a new application instance. The following artifacts are created after the creation of the application instance: Resource object of type disconnected, IT Resource Definition, IT Resource, Parent Process form, Process Definition, and adapters for provisioning.   



Name: Badge
Display Name: Badge
Description: Access to buildings, rooms, etc
Disconnected: checked

 4. If you like to add entitlements to a disconnected resource follow this step.

On the left side pane, select "Form Designer" under Configuration.


Search for the disconnected resource form.


Navigate to the "Child Objects" tab and create a new child form.









Select the child form and create a new lookup field.







Create a lookup definition for child field.



Then ensure "Searchable", "Entitlement", and "Searchable Picklist" are checked.




Go back to the parent object and regenerate the view.



5. Publish sandbox.




6. Navigate to "Scheduler" under "System Management" and run "Entitlement List" (run this if you added entitlements to disconnected resource) and "Catalog Synchronization Job" scheduled jobs.







Validate Provisioning
1. Log in to Identity Self Service.


2. On the left pane, click "Catalog" under "Requests".


3. Request the disconnected resource for another user and then checkout.






4. Fill out form, click "Ready to submit", and then click "Submit". At this point the resource will be in provisioning state.


5. Click to "Inbox" on the left pane.






6. Highlight request, click "Actions", and select "Complete" from drop down.



7. Validate the resource account on the user is provisioned.



4 comments:

  1. Hi,

    Regarding Disconnected application for 11.1.2.0

    Once i have submitted catalog for disconnected application instance on user.Disconnected workflow is showing

    BusinessFault : {http://xmlns.oracle.com/RequestServiceApp_jws/RequestDataService/RequestDataService}fault. Client received SOAP Fault from server : The request id cannot be null or empty.

    Please help on this issue.

    OIM Version : 11.1.2.0

    Thanks,
    Harish.M

    ReplyDelete
  2. i checked in track request no request has been created and checked in approval link also nothing is happening.But in em getting fault.

    Pleae help me to resolve this issue

    ReplyDelete
    Replies
    1. Hi,

      I´ve found this link, it adds an additional step on the Design Console

      http://www.identityincloud.com/2015/05/oim-11g-r2-ps3-lab-4-how-to-create.html

      Enjoy

      Delete
  3. Can we use the soa workflow which used for disconnected deprovisioning to revoke an account which is connected application?

    ReplyDelete