48
IBM Security Identity Manager Version 6.0 Oracle eBS Adapter User Guide SC27-4404-03

Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

  • Upload
    others

  • View
    3

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

IBM Security Identity ManagerVersion 6.0

Oracle eBS Adapter User Guide

SC27-4404-03

���

Page 2: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the
Page 3: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

IBM Security Identity ManagerVersion 6.0

Oracle eBS Adapter User Guide

SC27-4404-03

���

Page 4: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

NoteBefore using this information and the product it supports, read the information in “Notices” on page 29.

Edition notice

Note: This edition applies to version 6.0 of IBM Security Identity Manager (product number 5724-C34) and to allsubsequent releases and modifications until otherwise indicated in new editions.

© Copyright IBM Corporation 2012, 2014.US Government Users Restricted Rights – Use, duplication or disclosure restricted by GSA ADP Schedule Contractwith IBM Corp.

Page 5: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

Contents

Figures . . . . . . . . . . . . . . . v

Tables . . . . . . . . . . . . . . . vii

Preface . . . . . . . . . . . . . . . ixAbout this publication . . . . . . . . . . . ixAccess to publications and terminology . . . . . ixAccessibility . . . . . . . . . . . . . . xTechnical training. . . . . . . . . . . . . xSupport information . . . . . . . . . . . . xStatement of Good Security Practices . . . . . . x

Chapter 1. Introduction to the OracleeBS Adapter . . . . . . . . . . . . . 1Features of the Oracle eBS Adapter . . . . . . . 1

Chapter 2. Configuration checklist . . . 3

Chapter 3. Oracle eBS Adapter useraccount management tasks . . . . . . 5Running the Dispatcher and adapter . . . . . . 5User account reconciliation . . . . . . . . . 5

Reconciling supporting data . . . . . . . . 6User accounts . . . . . . . . . . . . . . 6

Attributes for adding user accounts. . . . . . 6Password lifespan for a user account . . . . . 7Specifying the lifespan of a user account . . . . 8Person, Customer, and Supplier attributes . . . 8

Assigning roles to a user account . . . . . . 9Assigning responsibilities to a user account. . . 10Assigning securing attributes to a user account 11

Modification of user accounts . . . . . . . . 11Password change of user accounts . . . . . . 12

User account suspension . . . . . . . . . . 12User account restoration . . . . . . . . . . 13

Chapter 4. Error troubleshooting . . . 15

Appendix A. APIs used by the adapter 19

Appendix B. Definitions for ITDI_HOMEand ISIM_HOME directories . . . . . . 21

Appendix C. Support information . . . 23Searching knowledge bases . . . . . . . . . 23Obtaining a product fix . . . . . . . . . . 24Contacting IBM Support . . . . . . . . . . 24

Appendix D. Accessibility features forIBM Security Identity Manager . . . . 27

Notices . . . . . . . . . . . . . . 29

Index . . . . . . . . . . . . . . . 33

© Copyright IBM Corp. 2012, 2014 iii

Page 6: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

iv IBM Security Identity Manager: Oracle eBS Adapter User Guide

Page 7: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

Figures

© Copyright IBM Corp. 2012, 2014 v

Page 8: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

vi IBM Security Identity Manager: Oracle eBS Adapter User Guide

Page 9: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

Tables

1. Checklist for configuring IBM Security IdentityManager . . . . . . . . . . . . . . 3

2. Required attributes for adding user accounts 63. Result of creating user accounts with values for

the Person, Customer, and Supplier attributes . 9

4. Adapter error messages, warnings, andrecommended actions . . . . . . . . . 15

5. APIs used by the adapter . . . . . . . . 19

© Copyright IBM Corp. 2012, 2014 vii

Page 10: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

viii IBM Security Identity Manager: Oracle eBS Adapter User Guide

Page 11: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

Preface

About this publication

The Oracle eBS User Guide provides the basic information that you can use tomanage user accounts on the Oracle Enterprise Business Suite (Oracle eBS) byusing IBM® Security Identity Manager.

IBM Security Identity Manager was previously known as Tivoli® Identity Manager.

The information describes user account management tasks, such as reconciliation,add, modify, suspend, restore, and password change.

Access to publications and terminologyThis section provides:v A list of publications in the “IBM Security Identity Manager library.”v Links to “Online publications.”v A link to the “IBM Terminology website.”

IBM Security Identity Manager library

For a complete listing of the IBM Security Identity Manager and IBM SecurityIdentity Manager Adapter documentation, see the online library(http://www-01.ibm.com/support/knowledgecenter/SSRMWJ/welcome).

Online publications

IBM posts product publications when the product is released and when thepublications are updated at the following locations:

IBM Security Identity Manager libraryThe product documentation site (http://www-01.ibm.com/support/knowledgecenter/SSRMWJ/welcome) displays the welcome page andnavigation for the library.

IBM Security Systems Documentation CentralIBM Security Systems Documentation Central provides an alphabetical listof all IBM Security Systems product libraries and links to the onlinedocumentation for specific versions of each product.

IBM Publications CenterThe IBM Publications Center site ( http://www-05.ibm.com/e-business/linkweb/publications/servlet/pbi.wss) offers customized search functionsto help you find all the IBM publications you need.

IBM Terminology website

The IBM Terminology website consolidates terminology for product libraries in onelocation. You can access the Terminology website at http://www.ibm.com/software/globalization/terminology.

© Copyright IBM Corp. 2012, 2014 ix

Page 12: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

AccessibilityAccessibility features help users with a physical disability, such as restrictedmobility or limited vision, to use software products successfully. With this product,you can use assistive technologies to hear and navigate the interface. You can alsouse the keyboard instead of the mouse to operate all features of the graphical userinterface.

Technical trainingFor technical training information, see the following IBM Education website athttp://www.ibm.com/software/tivoli/education.

Support informationIBM Support provides assistance with code-related problems and routine, shortduration installation or usage questions. You can directly access the IBM SoftwareSupport site at http://www.ibm.com/software/support/probsub.html.

Appendix C, “Support information,” on page 23 provides details about:v What information to collect before contacting IBM Support.v The various methods for contacting IBM Support.v How to use IBM Support Assistant.v Instructions and problem-determination resources to isolate and fix the problem

yourself.

Note: The Community and Support tab on the product information center canprovide additional support resources.

Statement of Good Security PracticesIT system security involves protecting systems and information throughprevention, detection and response to improper access from within and outsideyour enterprise. Improper access can result in information being altered, destroyed,misappropriated or misused or can result in damage to or misuse of your systems,including for use in attacks on others. No IT system or product should beconsidered completely secure and no single product, service or security measurecan be completely effective in preventing improper use or access. IBM systems,products and services are designed to be part of a comprehensive securityapproach, which will necessarily involve additional operational procedures, andmay require other systems, products or services to be most effective. IBM DOESNOT WARRANT THAT ANY SYSTEMS, PRODUCTS OR SERVICES AREIMMUNE FROM, OR WILL MAKE YOUR ENTERPRISE IMMUNE FROM, THEMALICIOUS OR ILLEGAL CONDUCT OF ANY PARTY.

x IBM Security Identity Manager: Oracle eBS Adapter User Guide

Page 13: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

Chapter 1. Introduction to the Oracle eBS Adapter

The Oracle eBS Adapter is an application that provides connectivity between IBMSecurity Identity Manager and Oracle eBS.

The adapter runs as a service, independent of whether you are logged on to IBMSecurity Identity Manager. You can automate the following user accountmanagement tasks using the Oracle eBS Adapter and IBM Security IdentityManager:v Adding user accounts to the Oracle eBSv Modifying attributes of Oracle eBS user accountsv Changing passwords of Oracle eBS user accountsv Suspending and restoring Oracle eBS user accountsv Retrieving user accounts from the Oracle eBS

The Oracle eBS Adapter contains Tivoli Directory Integrator assembly lines thatserve one or more user account operations. When the first request is sent from IBMSecurity Identity Manager, the required assembly line is loaded into TivoliDirectory Integrator. The same assembly line is then cached to serve subsequentoperations of the same type.

Features of the Oracle eBS AdapterThe Oracle eBS Adapter supports user account reconciliation and managementtasks.v Reconciliation of user accounts and other support data, such as person,

customer, supplier, and responsibilities from the Oracle eBS to the directoryserver of IBM Security Identity Manager.

v User account management tasks, such as add, modify (including passwordchange), suspend, and restore to manage accounts on the Oracle eBS using IBMSecurity Identity Manager.

Note: The Oracle eBS suite does not support deprovisioning of user accounts,that is, there are no stored procedures available for user account deprovision.Therefore, you cannot delete a user account by using the Oracle eBS Adapter.

© Copyright IBM Corp. 2012, 2014 1

Page 14: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

2 IBM Security Identity Manager: Oracle eBS Adapter User Guide

Page 15: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

Chapter 2. Configuration checklist

Use this checklist to ensure that you complete the required configuration steps.

Table 1 provides an overview of the process for configuring IBM Security IdentityManager.

Table 1. Checklist for configuring IBM Security Identity Manager

TaskFor information, see the followingdocumentation:

Install the Oracle eBS Adapter Installing the Oracle eBS Adapter in theDirectory Integrator-Based Oracle eBS AdapterInstallation and Configuration Guide

Import the adapter profile Importing the adapter profile into the IBMSecurity Identity Manager Server in theDirectory Integrator-Based Oracle eBS AdapterInstallation and Configuration Guide

Create a service for the Oracle eBS Adapter Creating the service in the DirectoryIntegrator-Based Oracle eBS Adapter Installationand Configuration GuideNote: After you create a Oracle eBS Adapterservice, the IBM Security Identity Managerserver creates a default provisioning policyfor the adapter service. You can customize aprovisioning policy for the Oracle eBSAdapter service according to yourorganization's requirements. For moreinformation, see the section aboutcustomizing a provisioning policy in the IBMSecurity Identity Manager productdocumentation.

Configure the Oracle eBS Adapter Configuring the Oracle eBS Adapter in theDirectory Integrator-Based Oracle eBS AdapterInstallation and Configuration Guide

Perform a reconciliation operation toretrieve user accounts and store them in theIBM Security Identity Manager server.

Managing reconciliation schedules in the IBMSecurity Identity Manager productdocumentation

Adopt orphan accounts on IBM SecurityIdentity Manager

Assigning an orphan account to a user in theIBM Security Identity Manager productdocumentation

© Copyright IBM Corp. 2012, 2014 3

Page 16: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

4 IBM Security Identity Manager: Oracle eBS Adapter User Guide

Page 17: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

Chapter 3. Oracle eBS Adapter user account managementtasks

IBM Security Identity Manager manages user accounts that are stored on theOracle eBS by using the Oracle eBS Adapter.

You can perform operations, such as reconciliation, add, modify (includingpassword change), suspend, and restore to manage your accounts. You canmanage:v Accounts for a specific personv Accounts for a service instancev Specific accounts by using the search function of IBM Security Identity Manager

Running the Dispatcher and adapterYou can run the Dispatcher with one of several methods. The Dispatcher in turnruns the Oracle eBS Adapter.

About this task

Before you start, ensure that you perform the steps given in Chapter 2,“Configuration checklist,” on page 3.

Procedurev Run in service mode.

1. In the Windows control panel, double-click Administrative Tools.2. Double-click Services.3. Right-click the IBM Security Identity Manager Adapter service, and click

Start.v Run in console mode.

1. At a Windows command prompt, go to the ITDI_HOME directory and setthe TDI_SOLDIR environment variable to the Tivoli Directory Integratoradapter solution directory. For example, set TDI_SOLDIR="c:\ProgramFiles\IBM\TDI\V7.1\timsol"

2. Run the following command from the ITDI_HOME directory:ibmdisrv.bat -c ITIM_RMI.xml -d

User account reconciliationThe reconciliation operation retrieves the user account information from the OracleeBS and stores it in the directory server of IBM Security Identity Manager.

You can schedule reconciliation to run at specific times and to return specificparameters. Running a reconciliation before its scheduled time does not cancel thescheduled reconciliation. For more information about scheduling reconciliation andrunning a scheduled reconciliation, see the IBM Security Identity Manager productdocumentation.

You can also perform the following reconciliation tasks at any time from IBMSecurity Identity Manager:

© Copyright IBM Corp. 2012, 2014 5

Page 18: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

v Reconciling support datav Reconciling a single user account

Reconciling supporting dataYou can reconcile supporting data for an Oracle eBS user account.

About this task

An Oracle eBS user account includes the following information:v Personv Customerv Supplierv Responsibilitiesv Securing Attributesv Roles

For more information about each of these attributes, see the Oracle eBSdocumentation.

To reconcile only the supporting data, without reconciling the user accounts:

Procedure1. Log on to IBM Security Identity Manager as an administrator.2. In the My Work pane, click Manage Services. The Manage Services page is

displayed.3. Select the type of service from the Service type list and click Search.4. Select the name of the service that you created for the Oracle eBS Adapter.5. Click the View popup menu icon and select Reconcile Now from the pop-up

menu. The Reconcile Now page is displayed.6. Click Define query.7. Select the Reconcile supporting data only check box and click Submit.

User accountsYou can add user accounts at any time for either an existing person or a newperson in the organization.

Adapter attributes define the accounts on the account form. For specificprocedures, see the IBM Security Identity Manager product documentation.

Attributes for adding user accountsTo add user accounts to the Oracle eBS, specify the required attributes on theOracle eBS account form.

Table 2. Required attributes for adding user accounts

Attribute Description

User ID User ID of the account.

6 IBM Security Identity Manager: Oracle eBS Adapter User Guide

Page 19: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

Table 2. Required attributes for adding user accounts (continued)

Attribute Description

Password You can choose to have IBM Security Identity Manager generate apassword for you or you can specify a password of your choice. Ifyou specify a password when adding a user account, you can logon to the Oracle eBS by using that password. Your password mustadhere to the password policy that is configured on the Oracle eBS.

Note: The User ID attribute on the Oracle eBS account form is mapped to the UserName attribute on the Oracle eBS.

In addition to the required attributes, you can also specify the following optionalattributes on the Oracle eBS account form:v Descriptionv Password Lifespan (in days)v Password Lifespan (in number of accesses)v Available Password Lifespan (in number of accesses)v User Start Datev User End Datev Session Numberv Emailv Faxv Personv Customerv Supplierv Responsibilitiesv Securing Attributesv Roles

Password lifespan for a user accountThe password lifespan specifies the time before the password of a user accountexpires.

The following attributes determine the password lifespan of a user account:

Password Lifespan (in days)Specifies the total number of days the password is valid. If you specify thisattribute, then after the specified number of days, the password expires.You must then change the password to continue accessing the Oracle eBS.

Password Lifespan (in number of accesses)Specifies the number of times you can access the Oracle eBS by using thesame password. If you specify this attribute, then you can log on to theOracle eBS by using the same password till the value for the AvailablePassword Lifespan attribute becomes zero.

Note: You are prompted to change the password on your first logon to the OracleeBS, regardless of whether you specify values for the Password Lifespan (in days)and the Password Lifespan (in number of accesses) attributes.

Chapter 3. Oracle eBS Adapter user account management tasks 7

Page 20: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

If you specify values for both the attributes, then you are prompted to change thepassword on the Oracle eBS depending on whichever of the following conditionsoccur first:v Available password lifespan becomes zerov Specified number of days elapse

Specifying the lifespan of a user accountYou can specify the lifespan of a user account, which is the time before the useraccount expires.

About this task

The value of the User End Date attribute specifies the expiration date of a useraccount on Oracle eBS. If you do not specify a value for the User End Dateattribute, then the user account is valid indefinitely.

Note: In the following situations, the status of a user account becomes inactive andunavailable for use:v When the value of the User Start Date attribute is same as the value of the User

End Date attributev When the start date of a user account is later than the end date of the user

account

In both the situations, the user account is created on the Oracle eBS, but the usercannot log on to the Oracle eBS.

Procedurev Specify the start date. This is the date on which the user account is active.

User Start Date: DateThe default value of this attribute on the Oracle eBS account form isNever. To specify a date, follow these steps:1. Clear the Never check box.2. Click the View Calendar icon and select the date.3. Click OK.

v Specify the end date. This is the date on which the user account becomesinactive and unavailable for use.

User End Date: DateThe default value of this attribute on the Oracle eBS account form isNever. To specify a date, follow these steps:1. Clear the Never check box.2. Click the View Calendar icon and select the date.3. Click OK.

Person, Customer, and Supplier attributesSpecifying the Person, the Customer, and the Supplier attributes means associatinga user account with an employee, a customer, or a supplier.

When you specify values for these attributes, you authorize employees, customers,and suppliers to use the Oracle eBS applications. The employee, the customer, andthe supplier who are associated with the user account can log on to the Oracle eBSby using the user name and password of that user account.

8 IBM Security Identity Manager: Oracle eBS Adapter User Guide

Page 21: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

Table 3 describes the result of creating user accounts with values for the Person,the Customer, and the Supplier attributes on the Oracle eBS account form.

Table 3. Result of creating user accounts with values for the Person, Customer, andSupplier attributes

Attribute Result

Person Customer Supplier

Specified Not specified Not specified The adapter creates the user account on theOracle eBS, and sets the value of the Personattribute on the Oracle eBS.

Notspecified

Specified Not specified The adapter creates the user account on theOracle eBS, and sets the value of theCustomer attribute on the Oracle eBS.

Notspecified

Not specified Specified The adapter creates the user account on theOracle eBS, and sets the value of the Supplierattribute on the Oracle eBS.

Specified Specified Not specified v If values are the same, then the adaptercreates the user account on the Oracle eBS,and sets the values of the Person and theCustomer attributes on the Oracle eBS.

v If values are different, then the adaptercreates the user account on the Oracle eBS,and sets the value of the Person attributeon the Oracle eBS. However, the adapterdoes not set the value of the Customerattribute on the Oracle eBS.

Specified Not specified Specified The adapter creates the user account on theOracle eBS irrespective of whether the valuesare same or different, and also sets the valuesof the Person and the Supplier attributes onthe Oracle eBS.

Notspecified

Specified Specified The adapter creates the user account on theOracle eBS irrespective of whether the valuesare same or different, and also sets the valuesof the Customer and the Supplier attributeson the Oracle eBS.

Specified Specified Specified v If values are the same, then the adaptercreates the user account on the Oracle eBS,and sets the values of all the threeattributes on the Oracle eBS.

v If values are different, then the adaptercreates the user account on the Oracle eBS,and sets the values of the Person and theSupplier attributes on the Oracle eBS.However, the adapter does not set thevalue of the Customer attribute on theOracle eBS.

Assigning roles to a user accountYou can assign roles to the Oracle eBS user account by using the Roles subform.

Chapter 3. Oracle eBS Adapter user account management tasks 9

Page 22: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

About this task

A responsibility cannot be deleted. It can be disabled by setting the end date to adate before the current date.

Procedure1. On the IBM Security Identity Manager console, select the Oracle eBS account.2. On the account form, locate the Roles field and click Details. The subform is

displayed. The subform lists the roles that are assigned or are to be assigned.3. Click Add. The Search window is displayed.4. Specify the search information and click Search. A window is displayed with

the search results. Each result is listed in the form Name | ID | System |Display_Name | Description.

5. Click the check box for each role that you want to add.6. Click Add. The Search window closes and the roles are displayed on the

subform.7. Specify optional start and end dates for each role in the form dd/mm/yyyy

hh24:mi. Not specifying an end date indicates that the role continuesindefinitely.

Note: An end date must not occur before the start date.8. Optional: Specify an assignment reason.9. Click Save Changes and Close Current Window. If you want to exit without

saving your changes click Cancel. You are returned to the account form.10. On the account form click Submit Now or Schedule Submission. If you

cancel the account form, the role changes are not saved.

Assigning responsibilities to a user accountYou can assign responsibilities to the Oracle eBS user account by using theResponsibilities subform.

About this task

A responsibility is uniquely identified by Oracle eBS applications. Responsibilitiesdetermine the access rights a user has to various Oracle eBS applications.

Note: A responsibility cannot be deleted. It can be disabled by setting the end dateto a date before the current date.

Procedure1. On the IBM Security Identity Manager console, select the Oracle eBS account.2. On the account form, locate the Responsibilities field and click Details. The

subform is displayed. The subform lists responsibilities that are assigned or areto be assigned.

3. Click Add. The Search window is displayed.4. Specify the search information and click Search. A window is displayed with

the search results. Each result is listed in the form Application_Name |Responsibility_Name.

5. Click the check box for each responsibility you want to add.6. Click Add. The Search window closes and the responsibilities are displayed on

the subform.

10 IBM Security Identity Manager: Oracle eBS Adapter User Guide

Page 23: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

7. Specify optional start and end dates for each role in the form dd/mm/yyyy. Notspecifying an end date indicates that the responsibility continues indefinitely.

Note: An end date must not occur before the start date.8. Click Save Changes and Close Current Window. If you want to exit without

saving your changes click Cancel. You are returned to the account form.9. On the account form click Submit Now or Schedule Submission. If you cancel

the account form, the responsibility changes are not saved.

Assigning securing attributes to a user accountYou can assign securing attributes to the Oracle eBS user account by using theSecuring attributes subform.

About this task

Securing attributes control a user’s access to data. The access is based on the userID and responsibilities. Securing attributes grant access to records of data tospecified users or responsibilities based on the attribute value for that record.

Procedure1. On the IBM Security Identity Manager console, select the Oracle eBS account.2. On the account form, locate the Securing Attributes field and click Details. The

subform is displayed. The subform lists securing attributes that are assigned orare to be assigned.

3. Click Add. The Search window is displayed.4. Specify the search information and click Search. A window is displayed with

the search results. Each result is listed in the form Attribute_Name |Attribute_Code | Application_Name | Application_ID | Attribute_Type.

5. Click the check box for each securing attribute you want to add.6. Click Add. The Search window closes and the securing attributes are displayed

on the subform.7. Specify a value or optionally modify an existing value for each securing

attribute. Attributes with the type DATE use the format dd/mm/yyyy. Attributeswith the type DATETIME use the format dd-mm-yyy hh24:mi:ss.

Note: To delete a securing attribute, click the check box for the attribute andclick Delete Selected. The subform is refreshed.

8. Click Save Changes and Close Current Window. If you want to exit withoutsaving your changes click Cancel. You are returned to the account form.

9. On the account form click Submit Now or Schedule Submission. If you cancelthe account form, the securing attribute changes are not saved.

Modification of user accountsYou can modify user account attributes at any time in IBM Security IdentityManager.

This section describes the adapter attributes that you can use to modify the useraccounts. For specific procedures, see the IBM Security Identity Manager productdocumentation.

Modifiable attributes

Chapter 3. Oracle eBS Adapter user account management tasks 11

Page 24: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

You can modify values of the following attributes on the Oracle eBS account form:v Password Lifespan (in days)v Password Lifespan (in number of accesses)v Available Password Lifespan (in number of accesses)v Personv Customerv Supplierv Descriptionv Emailv Faxv User Start Date (You can modify the value of this attribute on the Oracle eBS

account form, however, you cannot delete the value.)v User End Datev User IDv Responsibilitiesv Securing Attributesv Roles

Non-modifiable attributes

You cannot modify values of the Session Number attribute on the Oracle eBSaccount form:

Password change of user accountsYou can change the password of any of the Oracle eBS accounts that exist on IBMSecurity Identity Manager.

For information about changing passwords, see the IBM Security Identity Managerproduct documentation.

You cannot change the password of suspended user accounts on the Oracle eBS12i. However, to change the password perform one of the following steps:v Enable the user account by setting a future User End Date or delete the User

End Date and then perform the password change operation.v Perform the restore operation and specify the new password.

Note: The PASSWORD_DATE column in the FND_USER table in Oracle eBSdisplays the date when you set or change the user account password.

User account suspensionWhen you suspend a user account, the status of the user account on IBM SecurityIdentity Manager becomes inactive and the user account becomes unavailable foruse.

Suspending a user account does not remove the user account from IBM SecurityIdentity Manager. For more information about suspending user accounts, see theIBM Security Identity Manager product documentation.

12 IBM Security Identity Manager: Oracle eBS Adapter User Guide

Page 25: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

The adapter uses the FND_USER_PKG.DisableUser API to suspend user accountsby setting the Effective Dates To field on Oracle eBS to the current date of the hostworkstation on which the Oracle eBS database instance is running.

User account restorationThe restore operation reinstates the suspended user accounts to IBM SecurityIdentity Manager.

After restoring a user account, the status of the user account on IBM SecurityIdentity Manager becomes active. For more information about restoring useraccounts, see the IBM Security Identity Manager product documentation.

When you restore a user account from IBM Security Identity Manager, the adapteruses the FND_USER_PKG.EnableUser API that deletes the value of the EffectiveDates To field on Oracle eBS.

Chapter 3. Oracle eBS Adapter user account management tasks 13

Page 26: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

14 IBM Security Identity Manager: Oracle eBS Adapter User Guide

Page 27: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

Chapter 4. Error troubleshooting

Use error messages that the Oracle eBS Adapter provides to help identify actionsthat you can take to resolve the errors.

Whenever an operation fails, the corresponding error messages are logged in theibmdi.log file. This file is located in the adapter solution\logs directory.

You can display the logs in the user interface by running the RMI Dispatcher fromthe command prompt. You can also configure logging information for the adapter.For more information, see the Directory Integrator-Based Oracle eBS AdapterInstallation and Configuration Guide, and search for the sections that explain aboutdisplaying logs in the user interface and configuring logging information for theadapter.

Table 4 lists the error messages and warnings that might occur while performingthe Oracle eBS Adapter user tasks and the recommended actions to resolve thoseerrors.

Table 4. Adapter error messages, warnings, and recommended actions

Error message Recommended action

CTGIMT001E: The following erroroccurred. Error: Either the Oracle EBSservice name is incorrect or the service isnot up.

Ensure that:

v The value of the Oracle EBS Service Nameattribute on the Oracle eBS service form iscorrectly specified.

v The Oracle eBS service is running.

CTGIMT001E: The following erroroccurred. Error: Either the Oracle EBS hostor port is incorrect.

Ensure that values of the Oracle EBS ServiceHost and the Oracle EBS Service Portattributes on the Oracle eBS service form arecorrectly specified.

CTGIMT002E: The login credential ismissing or incorrect.

Ensure that the login credentials that arespecified in the Oracle eBS service form arecorrect.

CTGIMT001E: The following erroroccurred. Error: No suitable JDBC driverfound.

Ensure that:

v The appropriate version of the JDBC driveris copied to the workstation where theOracle eBS Adapter is installed.

v The path is included in the CLASSPATHenvironment variable.

CTGIMT600E: An error occurred whileestablishing communication with the IBMTivoli Directory Integrator server.

IBM Security Identity Manager could notestablish a connection with Tivoli DirectoryIntegrator. To fix this error, ensure that:

v Tivoli Directory Integrator is running.

v The URL specified for the Tivoli DirectoryIntegrator location attribute on the OracleeBS service form is correct.

© Copyright IBM Corp. 2012, 2014 15

Page 28: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

Table 4. Adapter error messages, warnings, and recommended actions (continued)

Error message Recommended action

CTGIMT007E: A system error occurredwhile adding an account. The account isnot added. ERROR: java.sql.SQLException:ORA-20001: APP-FND-02600: Unable tocreate user username due to the followingreason(s):No password provided for useruser name when callingFND_WEB_SEC.VALIDATE_PASSWORDto create a new user.

Ensure that a password is provided whencreating a user account.

CTGIMT007E: A system error occurredwhile adding an account. The account isnot added. ERROR: java.sql.SQLException:ORA-20001: APP-FND-02600: Unable tocreate user username due to the followingreason(s): This user name is already in use.Please enter a unique user name.

A user account with the specified user IDexists on the Oracle eBS. Create a useraccount with another user ID.

CTGIMT007E: A system error occurredwhile adding an account. The account isnot added. ERROR: java.sql.SQLException:ORA-06502: PL/SQL: numeric or valueerror: character string buffer too small.

This error occurs either when you specify anon-permissible data type value for anattribute or the value of the attribute exceedsthe permissible character limit.

For example, this error occurs if you specifyan alphanumeric value for the PasswordLifespan (in days) attribute or if you specify avalue for the Description attribute thatexceeds 240 characters.

To fix this error, ensure that:

v You specify a valid data type value for anattribute.

v The value of the attribute does not exceedthe permissible character limit.

CTGIMT007E: A system error occurredwhile adding an account. The account isnot added. ERROR: java.sql.SQLException:ORA-20001: The following invalidcharacters are not allowed insideusername: Invalid characters are: " ( ) * + , ;< > \ ~ /

Specify a value for the User ID attribute thatexcludes the non-permissible characters thatare listed in the error message.

CTGIMT007E: A system error occurredwhile adding an account. The account isnot added.ERROR: java.sql.SQLException:ORA-20001: APP-FND-02600: Unable tocreate user username due to the followingreason(s): Passwords must be at least 5characters long.

Ensure that your password adheres to thepassword policy that is described on theOracle eBS.

CTGIMT008W: The account was added,but some attributes failed.Attributes:erOraEBSDescription

The log file describes this error message as:java.sql.SQLException: ORA-20001:APP-FND-02601: User user name is not avalid user.

Ensure that the value of the Descriptionattribute does not exceed the permissiblecharacter limit. For example, in the Oracle eBS11i, the Description attribute value has a limitof 240 characters.

16 IBM Security Identity Manager: Oracle eBS Adapter User Guide

Page 29: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

Table 4. Adapter error messages, warnings, and recommended actions (continued)

Error message Recommended action

CTGIMT008W: The account was added,but some attributes failed.Attributes:erOraEBSUserFax

The log file describes the error messageas:java.sql.SQLException: ORA-20001:APP-FND-02601: User user name is not avalid user.

Ensure that the value of the Fax attribute doesnot exceed the permissible character limit. Forexample, in the Oracle eBS 11i, the Faxattribute value has a limit of 80 characters.

CTGIMT008W: The account was added,but some attributes failed.Attributes:erOraEBSCust

The log file describes the error message asfollows:java.sql.SQLException: ORA-20001:APP-FND-02913: User user name: TheCustomer is linked to Customer customername (Customer ID). The Person is linkedto Employee employee name (Employee ID).Customer and Employee must be linked tothe same person.

This error occurs when you specify differentvalues for the Person and the Customerattributes. Ensure that values of both theattributes are same.

CTGIMT008W The account was added, butsome attributes failed.

ERROR: java.sql.SQLException:ORA-01861: literal does not match formatstring

Ensure that a value specified to this attributematches the data format of the securingattribute.

CTGIMT008W The account was added, butsome attributes failed.

ERROR: java.sql.SQLException:ORA-01843: not a valid month

Ensure that a value specified to this attributematches the data format of the securingattribute.

CTGIMT008W The account was added, butsome attributes failed.

ERROR: java.sql.SQLException:ORA-06550: PLS-00103: Encountered thesymbol "x" when expecting one of thefollowing: ), * & | = - + < / > at in is modnot rem => .. <an exponent (**)> <> or !=or ~= >= <= <> and or like between ||The symbol "," was substituted for "x" tocontinue.

Ensure that a value specified to this attributematches the data format of the securingattribute.

CTGIMT008W The account was added, butsome attributes failed.

ERROR: java.sql.SQLException:ORA-01858: a non-numeric character wasfound where a numeric was expected

Ensure that a value specified to this attributematches the data format of the securingattribute.

Chapter 4. Error troubleshooting 17

Page 30: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

Table 4. Adapter error messages, warnings, and recommended actions (continued)

Error message Recommended action

CTGIMT013E: The account was added, butsome attributes failed.

Attributes:

v erOraEBSLeftPwdAccess

v erOraEBSPwdAccesses

v erOraEBSSessionNumber

v Available password

This error occurs when you specify anon-permissible data type value for anattribute.

When you add or modify a user account,ensure that you specify numeric values forthe attributes that are listed in the errormessage.

CTGIMT013E: A system error occurredwhile modifying the account. The accountis not modified. Error: None of theattribute were set, See Adapter log.

Ensure that the user account exists on theOracle eBS.

CTGIMT013E: A system error occurredwhile modifying the account. The accountis not modified. Error: None of theattribute were set, See Adapter log.

The log file describes this error messageas:Error in updating attributeerOraEBSUserStartDate : Can not clearstart Date.

Ensure that a value is specified for the UserStart Date attribute. The value of this attributecannot be empty.

CTGIMT013E A system error occurredwhile modifying the account.

Ensure that the user name is not in use andthat it does not exceed the limit for thenumber of characters.

CTGIMT014W: The account was modified,but some attributes failed. erUid Error: SeeAdapter log for detailed error.

Ensure that the user name is not in use andthat it does not exceed the limit for thenumber of characters.

CTGIMT024E: The account was notsuspended: ERROR: java.sql.SQLException:ORA-20001: APP-FND-02601: User username is not a valid user.

Ensure that the user account exists on theOracle eBS.

CTGIMT026E: The account was notrestored: ERROR: java.sql.SQLException:ORA-20001: APP-FND-02601: User username is not a valid user.

Ensure that the user account exists on theOracle eBS.

CTGIMT215E: The account was not deleteddue to a system error: Delete Operationsnot supported.

The Oracle eBS Adapter does not support thedelete operation.

18 IBM Security Identity Manager: Oracle eBS Adapter User Guide

Page 31: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

Appendix A. APIs used by the adapter

The Oracle eBS Adapter uses APIs (stored procedures) to do necessary operations.

Table 5 lists the APIs and their operations.

Table 5. APIs used by the adapter

Oracle eBS API Operation

FND_USER_PKG.DisableUser Suspend

FND_USER_PKG.UpdateUser Modify (This includes modification of all the attributesexcept the Responsibility attribute.)

FND_USER_PKG.EnableUser Restore

FND_USER_PKG.CreateUser Add

FND_USER_PKG.addresp Add responsibility

FND_USER_PKG.change_user_name Change user name

ICX_USER_SEC_ATTR_PUB.create_user_sec_attr Add securing attribute

ICX_USER_SEC_ATTR_PUB.delete_user_sec_attr Delete securing attribute

WF_LOCAL_SYNCH.propagateUserRole Add or modify user roles

© Copyright IBM Corp. 2012, 2014 19

Page 32: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

20 IBM Security Identity Manager: Oracle eBS Adapter User Guide

Page 33: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

Appendix B. Definitions for ITDI_HOME and ISIM_HOMEdirectories

ITDI_HOME is the directory where Tivoli Directory Integrator is installed.ISIM_HOME is the directory where IBM Security Identity Manager is installed.

ITDI_HOMEThis directory contains the jars/connectors subdirectory that contains filesfor the adapters.

Windowsdrive\Program Files\IBM\TDI\ITDI_VERSION

For example the path for version 7.1:C:\Program Files\IBM\TDI\V7.1

UNIX/opt/IBM/TDI/ITDI_VERSION

For example the path for version 7.1:/opt/IBM/TDI/V7.1

ISIM_HOMEThis directory is the base directory that contains the IBM Security IdentityManager code, configuration, and documentation.

Windowspath\IBM\isim

UNIXpath/IBM/isim

© Copyright IBM Corp. 2012, 2014 21

Page 34: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

22 IBM Security Identity Manager: Oracle eBS Adapter User Guide

Page 35: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

Appendix C. Support information

You have several options to obtain support for IBM products.v “Searching knowledge bases”v “Obtaining a product fix” on page 24v “Contacting IBM Support” on page 24

Searching knowledge basesYou can often find solutions to problems by searching IBM knowledge bases. Youcan optimize your results by using available resources, support tools, and searchmethods.

About this task

You can find useful information by searching the product documentation for IBMSecurity Identity Manager. However, sometimes you must look beyond the productdocumentation to answer your questions or resolve problems.

Procedure

To search knowledge bases for information that you need, use one or more of thefollowing approaches:1. Search for content by using the IBM Support Assistant (ISA).

ISA is a no-charge software serviceability workbench that helps you answerquestions and resolve problems with IBM software products. You can findinstructions for downloading and installing ISA on the ISA website.

2. Find the content that you need by using the IBM Support Portal.The IBM Support Portal is a unified, centralized view of all technical supporttools and information for all IBM systems, software, and services. The IBMSupport Portal lets you access the IBM electronic support portfolio from oneplace. You can tailor the pages to focus on the information and resources thatyou need for problem prevention and faster problem resolution. Familiarizeyourself with the IBM Support Portal by viewing the demo videos(https://www.ibm.com/blogs/SPNA/entry/the_ibm_support_portal_videos)about this tool. These videos introduce you to the IBM Support Portal, exploretroubleshooting and other resources, and demonstrate how you can tailor thepage by moving, adding, and deleting portlets.

3. Search for content about IBM Security Identity Manager by using one of thefollowing additional technical resources:v IBM Security Identity Manager version 6.0 technotes and APARs (problem

reports).v IBM Security Identity Manager Support website.v IBM Redbooks®.v IBM support communities (forums and newsgroups).

4. Search for content by using the IBM masthead search. You can use the IBMmasthead search by typing your search string into the Search field at the top ofany ibm.com® page.

5. Search for content by using any external search engine, such as Google, Yahoo,or Bing. If you use an external search engine, your results are more likely to

© Copyright IBM Corp. 2012, 2014 23

Page 36: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

include information that is outside the ibm.com domain. However, sometimesyou can find useful problem-solving information about IBM products innewsgroups, forums, and blogs that are not on ibm.com.

Tip: Include “IBM” and the name of the product in your search if you arelooking for information about an IBM product.

Obtaining a product fixA product fix might be available to resolve your problem.

About this task

You can get fixes by following these steps:

Procedure1. Obtain the tools that are required to get the fix. You can obtain product fixes

from the Fix Central Site. See http://www.ibm.com/support/fixcentral/.2. Determine which fix you need.3. Download the fix. Open the download document and follow the link in the

“Download package” section.4. Apply the fix. Follow the instructions in the “Installation Instructions” section

of the download document.

Contacting IBM SupportIBM Support assists you with product defects, answers FAQs, and helps usersresolve problems with the product.

Before you begin

After trying to find your answer or solution by using other self-help options suchas technotes, you can contact IBM Support. Before contacting IBM Support, yourcompany or organization must have an active IBM software subscription andsupport contract, and you must be authorized to submit problems to IBM. Forinformation about the types of available support, see the Support portfolio topic inthe “Software Support Handbook”.

Procedure

To contact IBM Support about a problem:1. Define the problem, gather background information, and determine the severity

of the problem. For more information, see the Getting IBM support topic in theSoftware Support Handbook.

2. Gather diagnostic information.3. Submit the problem to IBM Support in one of the following ways:

v Using IBM Support Assistant (ISA):Any data that has been collected can be attached to the service request.Using ISA in this way can expedite the analysis and reduce the time toresolution.a. Download and install the ISA tool from the ISA website. See

http://www.ibm.com/software/support/isa/.b. Open ISA.

24 IBM Security Identity Manager: Oracle eBS Adapter User Guide

Page 37: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

c. Click Collection and Send Data.d. Click the Service Requests tab.e. Click Open a New Service Request.

v Online through the IBM Support Portal: You can open, update, and view allof your service requests from the Service Request portlet on the ServiceRequest page.

v By telephone for critical, system down, or severity 1 issues: For the telephonenumber to call in your region, see the Directory of worldwide contacts webpage.

Results

If the problem that you submit is for a software defect or for missing or inaccuratedocumentation, IBM Support creates an Authorized Program Analysis Report(APAR). The APAR describes the problem in detail. Whenever possible, IBMSupport provides a workaround that you can implement until the APAR isresolved and a fix is delivered. IBM publishes resolved APARs on the IBM Supportwebsite daily, so that other users who experience the same problem can benefitfrom the same resolution.

Appendix C. Support information 25

Page 38: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

26 IBM Security Identity Manager: Oracle eBS Adapter User Guide

Page 39: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

Appendix D. Accessibility features for IBM Security IdentityManager

Accessibility features help users who have a disability, such as restricted mobilityor limited vision, to use information technology products successfully.

Accessibility features

The following list includes the major accessibility features in IBM Security IdentityManager.v Support for the Freedom Scientific JAWS screen reader applicationv Keyboard-only operationv Interfaces that are commonly used by screen readersv Keys that are discernible by touch but do not activate just by touching themv Industry-standard devices for ports and connectorsv The attachment of alternative input and output devices

The IBM Security Identity Manager library, and its related publications, areaccessible.

Keyboard navigation

This product uses standard Microsoft Windows navigation keys.

Related accessibility information

The following keyboard navigation and accessibility features are available in theform designer:v You can use the tab keys and arrow keys to move between the user interface

controls.v You can use the Home, End, Page Up, and Page Down keys for more

navigation.v You can launch any applet, such as the form designer applet, in a separate

window to enable the Alt+Tab keystroke to toggle between that applet and theweb interface, and also to use more screen workspace. To launch the window,click Launch as a separate window.

v You can change the appearance of applets such as the form designer by usingthemes, which provide high contrast color schemes that help users with visionimpairments to differentiate between controls.

IBM and accessibility

See the IBM Human Ability and Accessibility Center For more information aboutthe commitment that IBM has to accessibility.

© Copyright IBM Corp. 2012, 2014 27

Page 40: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

28 IBM Security Identity Manager: Oracle eBS Adapter User Guide

Page 41: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

Notices

This information was developed for products and services offered in the U.S.A.

IBM may not offer the products, services, or features discussed in this document inother countries. Consult your local IBM representative for information on theproducts and services currently available in your area. Any reference to an IBMproduct, program, or service is not intended to state or imply that only that IBMproduct, program, or service may be used. Any functionally equivalent product,program, or service that does not infringe any IBM intellectual property right maybe used instead. However, it is the user's responsibility to evaluate and verify theoperation of any non-IBM product, program, or service.

IBM may have patents or pending patent applications covering subject matterdescribed in this document. The furnishing of this document does not give youany license to these patents. You can send license inquiries, in writing, to:

IBM Director of LicensingIBM CorporationNorth Castle DriveArmonk, NY 10504-1785 U.S.A.

For license inquiries regarding double-byte (DBCS) information, contact the IBMIntellectual Property Department in your country or send inquiries, in writing, to:

Intellectual Property LicensingLegal and Intellectual Property LawIBM Japan, Ltd.19-21, Nihonbashi-Hakozakicho, Chuo-kuTokyo 103-8510, Japan

The following paragraph does not apply to the United Kingdom or any othercountry where such provisions are inconsistent with local law :

INTERNATIONAL BUSINESS MACHINES CORPORATION PROVIDES THISPUBLICATION "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHEREXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIEDWARRANTIES OF NON-INFRINGEMENT, MERCHANTABILITY OR FITNESSFOR A PARTICULAR PURPOSE.

Some states do not allow disclaimer of express or implied warranties in certaintransactions, therefore, this statement might not apply to you.

This information could include technical inaccuracies or typographical errors.Changes are periodically made to the information herein; these changes will beincorporated in new editions of the publication. IBM may make improvementsand/or changes in the product(s) and/or the program(s) described in thispublication at any time without notice.

Any references in this information to non-IBM Web sites are provided forconvenience only and do not in any manner serve as an endorsement of those Websites. The materials at those Web sites are not part of the materials for this IBMproduct and use of those Web sites is at your own risk.

© Copyright IBM Corp. 2012, 2014 29

Page 42: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

IBM may use or distribute any of the information you supply in any way itbelieves appropriate without incurring any obligation to you.

Licensees of this program who wish to have information about it for the purposeof enabling: (i) the exchange of information between independently createdprograms and other programs (including this one) and (ii) the mutual use of theinformation which has been exchanged, should contact:

IBM Corporation2Z4A/10111400 Burnet RoadAustin, TX 78758 U.S.A.

Such information may be available, subject to appropriate terms and conditions,including in some cases payment of a fee.

The licensed program described in this document and all licensed materialavailable for it are provided by IBM under terms of the IBM Customer Agreement,IBM International Program License Agreement or any equivalent agreementbetween us.

Any performance data contained herein was determined in a controlledenvironment. Therefore, the results obtained in other operating environments mayvary significantly. Some measurements may have been made on development-levelsystems and there is no guarantee that these measurements will be the same ongenerally available systems. Furthermore, some measurement may have beenestimated through extrapolation. Actual results may vary. Users of this documentshould verify the applicable data for their specific environment.

Information concerning non-IBM products was obtained from the suppliers ofthose products, their published announcements or other publicly available sources.IBM has not tested those products and cannot confirm the accuracy ofperformance, compatibility or any other claims related to non-IBM products.Questions on the capabilities of non-IBM products should be addressed to thesuppliers of those products.

All statements regarding IBM's future direction or intent are subject to change orwithdrawal without notice, and represent goals and objectives only.

This information contains examples of data and reports used in daily businessoperations. To illustrate them as completely as possible, the examples include thenames of individuals, companies, brands, and products. All of these names arefictitious and any similarity to the names and addresses used by an actual businessenterprise is entirely coincidental.

COPYRIGHT LICENSE:

This information contains sample application programs in source language, whichillustrate programming techniques on various operating platforms. You may copy,modify, and distribute these sample programs in any form without payment toIBM, for the purposes of developing, using, marketing or distributing applicationprograms conforming to the application programming interface for the operatingplatform for which the sample programs are written. These examples have notbeen thoroughly tested under all conditions. IBM, therefore, cannot guarantee orimply reliability, serviceability, or function of these programs. You may copy,modify, and distribute these sample programs in any form without payment to

30 IBM Security Identity Manager: Oracle eBS Adapter User Guide

Page 43: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

IBM for the purposes of developing, using, marketing, or distributing applicationprograms conforming to IBM's application programming interfaces.

Each copy or any portion of these sample programs or any derivative work, mustinclude a copyright notice as follows:

If you are viewing this information softcopy, the photographs and colorillustrations might not appear.

© (your company name) (year). Portions of this code are derived from IBM Corp.Sample Programs. © Copyright IBM Corp. _enter the year or years_. All rightsreserved.

If you are viewing this information in softcopy form, the photographs and colorillustrations might not be displayed.

Trademarks

IBM, the IBM logo, and ibm.com are trademarks or registered trademarks ofInternational Business Machines Corp., registered in many jurisdictions worldwide.Other product and service names might be trademarks of IBM or other companies.A current list of IBM trademarks is available on the Web at "Copyright andtrademark information" at http://www.ibm.com/legal/copytrade.shtml.

Adobe, Acrobat, PostScript and all Adobe-based trademarks are either registeredtrademarks or trademarks of Adobe Systems Incorporated in the United States,other countries, or both.

IT Infrastructure Library is a registered trademark of the Central Computer andTelecommunications Agency which is now part of the Office of GovernmentCommerce.

Intel, Intel logo, Intel Inside, Intel Inside logo, Intel Centrino, Intel Centrino logo,Celeron, Intel Xeon, Intel SpeedStep, Itanium, and Pentium are trademarks orregistered trademarks of Intel Corporation or its subsidiaries in the United Statesand other countries.

Linux is a trademark of Linus Torvalds in the United States, other countries, orboth.

Microsoft, Windows, Windows NT, and the Windows logo are trademarks ofMicrosoft Corporation in the United States, other countries, or both.

ITIL is a registered trademark, and a registered community trademark of the Officeof Government Commerce, and is registered in the U.S. Patent and TrademarkOffice.

UNIX is a registered trademark of The Open Group in the United States and othercountries.

Cell Broadband Engine and Cell/B.E. are trademarks of Sony ComputerEntertainment, Inc., in the United States, other countries, or both and is used underlicense therefrom.

Notices 31

Page 44: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

Java™ and all Java-based trademarks and logos are trademarks or registeredtrademarks of Oracle and/or its affiliates.

Privacy Policy Considerations

IBM Software products, including software as a service solutions, ("SoftwareOfferings") may use cookies or other technologies to collect product usageinformation, to help improve the end user experience, and to tailor interactionswith the end user or for other purposes. In many cases, no personally identifiableinformation is collected by the Software Offerings. Some of our Software Offeringscan help enable you to collect personally identifiable information. If this SoftwareOffering uses cookies to collect personally identifiable information, specificinformation about this offering’s use of cookies is set forth below.

This Software Offering does not use cookies or other technologies to collectpersonally identifiable information.

If the configurations deployed for this Software Offering provide you as customerthe ability to collect personally identifiable information from end users via cookiesand other technologies, you should seek your own legal advice about any lawsapplicable to such data collection, including any requirements for notice andconsent.

For more information about the use of various technologies, including cookies, forthese purposes, see IBM's Privacy Policy at http://www.ibm.com/privacy andIBM’s Online Privacy Statement at http://www.ibm.com/privacy/details/us/ensections entitled "Cookies, Web Beacons and Other Technologies and SoftwareProducts and Software-as-a Service".

32 IBM Security Identity Manager: Oracle eBS Adapter User Guide

Page 45: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

Index

Aaccessibility x, 27accounts

responsibilities, assigning 10roles, assigning 10securing attributes, assigning 11

adapterAPIs 19assembly lines 1dispatcher, running

console mode 5service mode 5

featuresreconciliation 1user account management 1

overview 1running as a service 1troubleshooting errors 15user account management tasks 5

APIs 19attributes

customer 8person 8supplier 8user accounts 6

Cchecklist, configuration 3configuration checklist 3customers 8

Eeducation xemployees 8errors, troubleshooting 15

IIBM

Software Support xSupport Assistant x

IBM Support Assistant 24ISA 24ISIM_HOME definition 21ITDI_HOME definition 21

Kknowledge bases 23

Llifespan

password 7user account 8

Nnotices 29

Oonline

publications ixterminology ix

operationsadding 6changing passwords 12modifying 11reconciling 5restoring 13suspend 12

Ppassword

changing 12lifespan 7

person 8problem-determination xpublications

accessing online ixlist of ix

Ssubforms

for assigning responsibilities 10for assigning roles 10for assigning securing attributes 11

suppliers 8support contact information 24supporting data, reconciling 6

Tterminology ixtraining xtroubleshooting

adapter errors 15contacting support 24getting fixes 24searching knowledge bases 23support website x

Uuser accounts

adding 6assembly lines 1assigning responsibilities 10assigning roles 10assigning securing attributes 11attributes, adding 6changing passwords 12

user accounts (continued)lifespan 8management ixmanagement task automation 1modifying 11passwords, changing 12reconciling 5responsibilities, assigning 10restoring 13roles, assigning 10securing attributes, assigning 11suspend 12

© Copyright IBM Corp. 2012, 2014 33

Page 46: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

34 IBM Security Identity Manager: Oracle eBS Adapter User Guide

Page 47: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the
Page 48: Oracle eBSAdapter User Guide...For more information about each of these attributes, see the Oracle eBS documentation. To reconcile only the supporting data, without reconciling the

����

Printed in USA

SC27-4404-03