Explore Sun Identity Manager For Your Organization

A cognitive journey to Sun Identity Manger Product to touch the power of SUN (Sun Microsystem)

https://www.sun.com/offers/details/buyers_guide_1008.xml

Click on above link to

Guide to Evaluating and Buying Identity Management

from Sun's offer

Common Build Environment (CBE)

Netbean IDE provides IDM plug-in to develop IDM application with CBE (Common Build Environment).

This CBE is very useful to handle complete IDM build process.

Even it makes multiple environments build process easy and intuitive.

Go to the below link to get the complete understanding of CBE:

http://wikis.sun.com/display/sunidmdev/Using+the+CBE#UsingtheCBE-FileReference

How To Setup An IDM Project

Just imagine you are a newbie in Sun IDM development then you are definitely bogged down with
enormous new terminologies like build-process, XML imports and build-targets etc.
Now, you require a mentor who could teach you everything related to development and deployment of an IDM application. So, to get a quick insight into IDM platform and have a virtual mentor

Please follow the link…

http://wikis.sun.com/display/sunidmdev/How+To+Setup+An+IDM+Project

How to create groups in LDAP or Active Directory (AD) from Workflow

As we know very well that LDAP or Active Directory(AD)is always being used to store data in hierarchical structure by making different-different Groups.

The Groups in LDAP or AD can be expanded to any level in hierarchical structure.
There is always LDAP or AD Administrator who creates Groups in a domain as per
predefined requirement.

But sometimes as an IDM developer you might face a situation to create a Group
dynamically after being evaluated some logics in your business Work Flow.

Here is my endeavor to make your work little bit smoother

<Action id='0' name='create groups in LDAP'>
<expression>
<block name='create groups in LDAP' trace='true'>
<set name='resourceObject'>
<invoke name='getObject'>
<invoke name='getLighthouseContext'>
<ref>WF_CONTEXT</ref>
</invoke>
<invoke name='findType' class='com.waveset.object.Type'>
<s>Resource</s>
</invoke>
<s>DemoLDAP</s> <!-- LDAP or AD resource name -->
</invoke>
</set>
<set name='resourceAdapterHandle'>
<invoke name='findAdapter' class='com.waveset.provision.ResourceOp'>
<ref>resourceObject</ref>
<invoke name='getCache'>
<invoke name='getLighthouseContext'>
<ref>WF_CONTEXT</ref>
</invoke>
</invoke>
</invoke>
</set>
<set name='newOUGenericObject'>
<new class='com.waveset.object.GenericObject'>
<map>
<s>objectId</s>
<s>ou=GroupName,dc=test,dc=root</s> <!-- Group name -->
<s>objectType</s>
<s>Organizational Unit</s>
</map>
</new>
</set>
<invoke name='createObject'>
<ref>resourceAdapterHandle</ref>
<ref>newOUGenericObject</ref>
<map/>
</invoke>
</block>
</expression>
</Action>

Make Process Diagram Visible in IDM 8.1

In IDM 8.1 the visibility of the Process Diagram is disabled by default.

But sometime you want to see the flow of a workflow's activities then you go to

process diagram in Admin Interface.

To make the process diagram visible do the following changes in


'Configuration:System Configuration' xml file.

<Attribute name='disableProcessDiagrams'>
<Boolean>false</Boolean>
</Attribute

By default the attribute 'disableProcessDiagrams' value is true.

Note: Please restart your application to get the effects of changes in the IDM.

Stop Active Sync

Suppose you have a requirement to stop your active sync not from admin interface.

Then you are bound to contemplate to achieve that then you slew to programming paradigm to meet the requirement.

Hey no need to bring sweat in your euphoria just mail me to get remedy

ravinder.fbd@gmail.com

Search users in LDAP

Here you can search users in LDAP by using the below code.

Note: DemoLDAP is the name of the resource which is configured in your IDM.

<Activity id='2' name='search LDAP'>
<Action id='0' name='search LDAP'>
<expression>
<block name='search LDAP..' trace='true'>
<set name='searchResults'>
<invoke name='getResourceObjects' class='com.waveset.ui.FormUtil'>
--returns list of users whose objectClass is Top in LDAP
<invoke name='getLighthouseContext'>
<ref>WF_CONTEXT</ref>
</invoke>
<s>User</s> --- Searching Users
<s>DemoLDAP</s>  -------- Name of LDAP resource which is configured in IDM
<map>
<s>searchContext</s> ---Name of container wherein you want to  perform  search
<s>ou=People,DC=test,DC=edu</s>
<s>searchScope</s>
<s>subTree</s>
<s>searchAttrsToGet</s> --- name of attribute which you want to search (it's value must be a list)
<list>
<s>uid</s>
</list>
<s>searchFilter</s>  ----- attributes on which you want to perfomr your search   
<s>objectClass=Top</s>
</map>
</invoke>
</set>
<dolist name='users'>
<ref>searchResults</ref> ----List of users being searched in above method
<get>
<ref>users</ref>
<s>uid</s>  ---- attribute that you wanted to fetch
</get>
</dolist>
</block>
</expression>
</Action>

searchFilter value could be changed as per your search criteria e.g givenName='John' or city='New York'.

How could a future Oracle-Sun Identity Management Stack look like?

http://www.kuppingercole.com/articles/fg_mk_oracle_sun220409