oracle identity manager 11gr2ps2 new diagnostics capabilities

An Oracle Technical Paper

September 2014

Oracle Identity Manager 11gR2PS2

New Diagnostics capabilities

Oracle Identity Manager 11gR2PS2 New Diagnostics capabilities

Disclaimer

The following is intended to outline our general product direction. It is intended for information

purposes only, and may not be incorporated into any contract. It is not a commitment to deliver

any material, code, or functionality, and should not be relied upon in making purchasing

decisions. The development, release, and timing of any features or functionality described for

Oracles products remains at the sole discretion of Oracle.


Introduction ....................................................................................... 2

Using the dashboard for investigating OIM/SOA processes ............... 3

Scenario ........................................................................................ 3

Requesting an entitlement ............................................................. 3

Investigations using the Dashboard ............................................... 4

Closing the request ...................................................................... 12

Final views in the Dashboard ....................................................... 13

Conclusion ...................................................................................... 14


2

Introduction

OIM11gR2PS2 is offering via Enterprise Manager new diagnostics capabilities.

The Orchestration Dashboard shows the following:

A trace of all recent user operations

Short error messages with full exception stack

Error logs

SOA composite instance details

The predefined and custom event handlers configured for an operation

Search results based on various criteria

Three tabs are available:

Dashboard tracks and displays all the recent operations and failures. It consists of the

following sections:

Recent Operations: By default, it displays in a tabular format the recent operations.

From the drop-down list on the top right of the table, you can select any other value,

such as Last 48-Hours or ALL, to display the information for the selected time period.

Failed Operations: By default, it displays in a tabular form the operations that failed in

the last 24 hours.

Operations lists all operations that are configured and deployed. Click an operation to

display configuration details, which included all the event handlers that are configured for the

selected operation.

Instances displays information about the operation instances and allows to search for

instances of a specific operation.


3

Using the dashboard for investigating OIM/SOA processes

Scenario

We will look after the information provided by Enterprise Manager when a user (Sally Downs) is requesting an entitlement (VPN Access) approved by her manager (Danny Crane).

Requesting an entitlement

In the Self Service console, Sally Downs requests VPN Access entitlement:


4

We can see that her manager, Danny Crane, should approve the request:

Investigations using the Dashboard

In Enterprise Manager, we access to the Dashboard clicking on OIM in Identity and Access entry and selecting Administration:


5

In the Dashboard we can see the pending request for the entitlement:

Clicking on the Operation ID link, gives the details about the OIM internal steps:

We can see that the PostSubmissionDataActions event handler has finished and that the ApprovalInitiation is pending.


6

To be able to get the details about the related approval workshop, back on the Dashboard, we have to click on the Context ID link:

It drives to the Associated Workflows dialog box.

Clicking on the link opens another tab in the browser which shows the details of the called SOA Composite in charge of the approval workflow.


7

The ApprovalProcess link leads to the details of the BPEL process by itself.

The Flow tab is giving a nice graphical view of the orchestration steps:


8

To see the data associated with a step you just have to click on its icon (here InvoqueRequestDetailsOperation).


9

The requested VPN Access entitlement is clearly visible in the data flow. Looking to the task just before getting the approver response, we can see that Danny Crane (DCRANE in the screenshot) is the person that should approve or reject the request:

Back to the Dashboard, clicking on the EDID link of the pending operation opens the details:

Here we can see the several entries of the diagnostic log:


10

It is possible to filter to the most significant alerts selecting for example Incident Error, Error and Warning check boxes.

We can select in the Operations tab some specific operation and see what handlers have been configured:


11

Instances tab is like the Dashboard one but with search capabilities:

Let's take the opportunity to grab some details about the Set Challenge Question Answers operation:


12

The event handlers that have been called are shown:

Closing the request

To close the request, we connect as Danny Crane, open the Indox, and after selecting the pending request approve it:


13

The entitlement should have been given to Sally Downs:

Final views in the Dashboard

The operation should have the COMPLETED status:


14

Confirmation of the ending of the BPEL workflow could be gathered from Enterprise Manager (noticing the COMPLETED entry):

Conclusion

This ends the illustration of the diagnostics capabilities offered by OIM 11gR2PS2 in Enterprise Manager, such as:

Details of the OIM internal operations

Drilling logs

Complete view of the approval BPEL workflow in relationship with OIM operations. This feature allows end-to-end tracking of OIM operations including approval BPEL orchestration steps.

Oracle Identity Manager 11gR2PS2

New Diagnostics Capabilities

September 2014

Author: Michet Hascot

Oracle Corporation

World Headquarters

500 Oracle Parkway

Redwood Shores, CA 94065

U.S.A.

Worldwide Inquiries:

Phone: +1.650.506.7000

Fax: +1.650.506.7200

oracle.com

Copyright 2014, Oracle and/or its affiliates. All rights reserved. This document is provided for information purposes only and the

contents hereof are subject to change without notice. This document is not warranted to be error-free, nor subject to any other

warranties or conditions, whether expressed orally or implied in law, including implied warranties and conditions of merchantability or

fitness for a particular purpose. We specifically disclaim any liability with respect to this document and no contractual obligations are

formed either directly or indirectly by this document. This document may not be reproduced or transmitted in any form or by any

means, electronic or mechanical, for any purpose, without our prior written permission.

Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.

AMD, Opteron, the AMD logo, and the AMD Opteron logo are trademarks or registered trademarks of Advanced Micro Devices.

Intel and Intel Xeon are trademarks or registered trademarks of Intel Corporation. All SPARC trademarks are used under license

and are trademarks or registered trademarks of SPARC International, Inc. UNIX is a registered trademark licensed through X/Open

Company, Ltd. 1010

oracle identity manager 11gr2ps2 new diagnostics capabilities

Documents

recent operations

failed operations

manager danny crane

operation instances

dashboard tracks

orchestration dashboard

selected operation

oracle technical paper