Applying SOA Bundle Patch

Description: Demonstrates how to apply a SOA bundle patch in general. As as example, this post shows applying SOA Bundle Patch 11.1.1.9.160119 (Patch 22469374) on top of base SOA 11.1.1.9.0.

References:
Oracle Support - SOA 11g and 12c: Bundle Patch Reference (Doc ID 1485949.1) \

Applying WebLogic Patch Set Update

Description: Demonstrates how to apply a WebLogic Patch Set Update (PSU) in general. As an example, critical patch 29633432 (MXLE - WLS 10.3.6.0.190716) is applied to WebLogic 10.3.6 on a Linux machine.

References:
https://www.oracle.com/technetwork/topics/security/alerts-086861.html
WebLogic Server PSU - Popular Known Issues (Doc ID 2458832.1)
Critical Patch Update (CPU) Program July 2019 Patch Availability Document (PAD) (Doc ID 2534806.1)
Patch 29633432: SU Patch MXLE:WLS PATCH SET UPDATE 10.3.6.0.190716

Upgrade Java Version for OIM

Description: Demonstrates how to upgrade Java version for the OIM 11g R2 PS3 stack. A symbolic link is used to reference the new JDK. The example shows upgrading from Sun JDK 6 Update 38 to Oracle JDK 7 Update 171 on a Linux machine.





Tested On: WebLogic 10.3.6, Oracle Identity Manager 11.1.2.3.0, SOA 11.1.1.9.0,  BI Publisher 11.1.1.9.0

References: How to Install and Maintain the Java SE Installed or Used with FMW 11g/12c Products (Doc ID 1492980.1), All Java SE Downloads on MOS (Doc ID 1439822.1)

Scheduled Task Plugin: Reconciliation Event Generator Database Feed

Tested On: Oracle Identity Manager 11.1.2.3.0
Description: A custom scheduled task used to create reconciliation events for a specific resource object using data from a database table. Trusted or target resource object can be used as long as the required fields are provided.

OIM Scheduled Job Multi-threading Example

Tested On: Oracle Identity Manager 11.1.2.3.0
Description: Demonstrates using multi-threading in an Oracle Identity Manager scheduled job. The scheduled task example applies changes to OIM users using data given from a CSV file. A thread is created per data entry in CSV file and uses OIM API service to apply changes to the OIM user.
References: 
https://blogs.oracle.com/OIM11gR2/entry/oim_11g_multi_thread_approach

Retrieve Credential From WebLogic Credential Store

Version: 10.3.6
Description: This post demonstrates how to obtain plain-text passwords from the WebLogic Credential Store.
References: http://docs.oracle.com/cd/E15586_01/core.1111/e10043/csfadmin.htm

Decrypt WebLogic Credential From Boot Properties

Tested On: 10.3.6.0
Description: Uses WebLogic API to decrypt credentials from the boot.properties file.
Reference: https://gokhanatil.com/2015/03/how-to-recover-weblogic-administration-password-of-enterprise-manager.html

SOA Workflow Service Client Example: Fetch and Reassign Request Tasks

Tested On: Oracle Identity Manager 11.1.2.3.0 and Oracle SOA 11.1.1.9.0
Description: Demonstrates how to setup a remote SOA Workflow Service client and use its APIs. Fetching all the requests of a given user and reassigning a task to a different user used are demonstrated as examples. The examples given here can be manually done via OIM Identity Self Service page.

Identity Self Service: Inbox containing tasks generated by OOTB SOA Composites

Reassigning task via Identity Self Service

WebLogic EM Console: SOA Composite Instances

References:
http://www.oracle.com/technetwork/middleware/soasuite/documentation/index-099743.html
http://docs.oracle.com/cd/E12839_01/apirefs.1111/e10660/oracle/bpel/services/workflow/query/ITaskQueryService.html#queryTasks_oracle_bpel_services_workflow_verification_IWorkflowContext__java_util_List__java_util_List__oracle_bpel_services_workflow_query_ITaskQueryService_AssignmentFilter__java_lang_String__oracle_bpel_services_workflow_repos_Predicate__oracle_bpel_services_workflow_repos_Ordering__int__int_http://docs.oracle.com/cd/E28280_01/dev.1111/e10224/bp_worklistcust.htm#SOASE10447
https://beatechnologies.wordpress.com/2011/08/24/using-java-apis-for-oracle-human-workflows/
https://kaustavdassoa.wordpress.com/2013/10/31/bpm-worklist-sample-reassign-or-delegate-task/

OIM API: Manual Complete Provisioning Tasks

Tested On: Oracle Identity Manager 11.1.2.3.0
Description: Demonstrates how to mark rejected provisioning tasks as "manual complete" status via Oracle Identity Manager API. Provisioning tasks can also be marked manual completed through the Identity Self Service page.

Identity Self Service Home Page

Provisioning Tasks

References:
https://docs.oracle.com/cd/E52734_01/oim/OMJAV/toc.htm

Customizing User Lifecycle Events

Tested On: Oracle Identity Manager 11.1.2.3
Description: Demonstrates how to customize user lifecycle events such enable, disable, lock, and unlock user operations in Oracle Identity Manager. A custom event handler has been implemented to execute process tasks on specified resources defined in a custom lookup. 

Lookup.User.Lock.AppInstDisplayNameToProcessTasks

For example, the lookup given above is used on user lock operation. Upon locking a user, the custom event handler reads from this lookup to execute the process tasks (Decode; Comma delimited value of process task names) for the corresponding application instance (Code Key; Application Instance Display Name).

Lock User: OpenLDAP and DBAT Locked
Badge Disabled

 
References:
http://docs.oracle.com/cd/E52734_01/oim/OMJAV/toc.htm
http://docs.oracle.com/cd/E27559_01/admin.1112/e27149/system_props.htm#OMADM885
http://oraclestack.blogspot.com/2015/12/oim-custom-resource-account-status.html

OIM Custom Resource Account Status

Description: Demonstrates how to create a custom status for any resource accounts.

User Preprocess Event Handler Template

Tested On: Oracle Identity Manager 11.1.2.3.0
Description: A sample template for creating user preprocess event handlers is given here. Both execute() methods, one for processing single event and the other for processing bulk events, are implemented. The example given here is a preprocess event handler on user lock operation. Also, a test driver is provided to perform lock on a single user and on multiple users.
References: https://docs.oracle.com/cd/E52734_01/oim/OMDEV/oper.htm#OMDEV3085
https://docs.oracle.com/cd/E52734_01/oim/OMJAV/toc.htm

OIM API: Calling Process Task Instance On User Resource Account

Tested On: Oracle Identity Manager 11.1.2.3.0
Description: Demonstrates how to call a provisioning task on a user's resource account via Oracle Identity Manager API. Below are screen-shots to manually add a process task instance call to a resource account via Oracle Identity Manager Self Service User Interface.

Click >> for more options -> Resource History

Click "Add Task" button

Select a Process Task -> Click "Add"

Confirm Add Task

Provisioning Task Executed

References: http://docs.oracle.com/cd/E52734_01/oim/OMJAV/toc.htm

Configure Password Policy for Application Instances

Version: Oracle Identity Manager 11.1.2.3.0
Description: Demonstrates how to create a password policy and attach it to a specific resource object. The password policy is applied to application instances that use that resource object.
References:
https://docs.oracle.com/cd/E52734_01/oim/OMUSG/pwdpolicy.htm#OMUSG5481
http://docs.oracle.com/cd/E52734_01/oim/OMADM/appinstance.htm#OMADM4925

OIM API: Change User's Application Instance Account Password

Version: Oracle Identity Manager 11.1.2.3.0
Description: Demonstrates using Oracle Identity Manager API to change a user's resource account password.
References:
http://docs.oracle.com/cd/E52734_01/oim/OMJAV/toc.htm
http://docs.oracle.com/cd/E52734_01/index.html

Giving an OIM User System Administrator Privileges

Version: Oracle Identity Manager 11.1.2.3.0
Description: Demonstrates how to give an OIM user system administrator privileges.

Custom Error Message for Validation Handler

Tested On: Oracle Identity Manager 11.1.2.3.0
Description: Demonstrates how to create custom error messages or use out of the box error messages in a validation event handler.

Change Password Validation Event Handler: Adding Custom Password Requirements

Tested On: Oracle Identity Manager 11.1.2.3.0
Description: Demonstrates how to add custom password requirements which are not covered by out of the box Oracle Identity Manager password policy. Implementation is handled by creating a custom validation event handler on change password operations. The example given here validates that the new password does not contain the user's middle name and email.

Validation on First Login Password Change

Validation on Forgot Password

Validation on Admin Changing User Password

References: https://docs.oracle.com/cd/E52734_01/oim/OMDEV/oper.htm#OMDEV3085
http://docs.oracle.com/cd/E52734_01/oim/OMUSG/pwdpolicy.htm#OMUSG5478
http://docs.oracle.com/cd/E27559_01/apirefs.1112/e28159/oracle/iam/platform/Platform.html#getServiceForEventHandlers_java_lang_Class__java_lang_String__java_lang_String__java_lang_String__java_util_HashMap_

OIM Connector: PeopleSoft Employee Reconcilation 11.1.1.5.0

Tested On: Oracle Identity Manager 11.1.2.3.0
Description: Demonstrates how to install and configure PeopleSoft Employee Reconciliation connector. This connector only uses trusted reconciliation (OIM users are created based on data from an authoritative source such as PeopleSoft).
References: https://docs.oracle.com/cd/E22999_01/index.htm
https://docs.oracle.com/cd/E22999_01/doc.111/e25370/toc.htm

Oracle Identity Manager 11.1.2.3.0 Virtual Machine Template

Download Link: OIM 11g R2 PS3 VM Template

Operating System: Oracle Linux 6.5 (64-bits)
Oracle Database Version: 11.2.0.1.0
Java Version: 6U38
WebLogic Server: 10.3.6
Service-Oriented Architecture (SOA): 11.1.1.9.0
Identity and Access Management (IAM): 11.1.2.3.0

Use Password1 for all logins.