You are on page 1of 17

An Oracle Technical Paper

September 2014
Oracle Identity Manager 11gR2PS2
New Diagnostics capabilities

Oracle Identity Manager 11gR2PS2 New Diagnostics capabilities
Disclaimer
The following is intended to outline our general product direction. It is intended for information
purposes only, and may not be incorporated into any contract. It is not a commitment to deliver
any material, code, or functionality, and should not be relied upon in making purchasing
decisions. The development, release, and timing of any features or functionality described for
Oracles products remains at the sole discretion of Oracle.
Oracle Identity Manager 11gR2PS2 New Diagnostics capabilities
Introduction ....................................................................................... 2
Using the dashboard for investigating OIM/SOA processes ............... 3
Scenario ........................................................................................ 3
Requesting an entitlement ............................................................. 3
Investigations using the Dashboard ............................................... 4
Closing the request ...................................................................... 12
Final views in the Dashboard ....................................................... 13
Conclusion ...................................................................................... 14
Oracle Identity Manager 11gR2PS2 New Diagnostics capabilities
2
Introduction
OIM11gR2PS2 is offering via Enterprise Manager new diagnostics capabilities.
The Orchestration Dashboard shows the following:
A trace of all recent user operations
Short error messages with full exception stack
Error logs
SOA composite instance details
The predefined and custom event handlers configured for an operation
Search results based on various criteria
Three tabs are available:
Dashboard tracks and displays all the recent operations and failures. It consists of the
following sections:
Recent Operations: By default, it displays in a tabular format the recent operations.
From the drop-down list on the top right of the table, you can select any other value,
such as Last 48-Hours or ALL, to display the information for the selected time period.
Failed Operations: By default, it displays in a tabular form the operations that failed in
the last 24 hours.
Operations lists all operations that are configured and deployed. Click an operation to
display configuration details, which included all the event handlers that are configured for the
selected operation.
Instances displays information about the operation instances and allows to search for
instances of a specific operation.



Oracle Identity Manager 11gR2PS2 New Diagnostics capabilities
3
Using the dashboard for investigating OIM/SOA processes
Scenario
We will look after the information provided by Enterprise Manager when a user (Sally Downs)
is requesting an entitlement (VPN Access) approved by her manager (Danny Crane).

Requesting an entitlement
In the Self Service console, Sally Downs requests VPN Access entitlement:


































Oracle Identity Manager 11gR2PS2 New Diagnostics capabilities
4
We can see that her manager, Danny Crane, should approve the request:

Investigations using the Dashboard
In Enterprise Manager, we access to the Dashboard clicking on OIM in Identity and Access
entry and selecting Administration:











Oracle Identity Manager 11gR2PS2 New Diagnostics capabilities
5
In the Dashboard we can see the pending request for the entitlement:


Clicking on the Operation ID link, gives the details about the OIM internal steps:

We can see that the PostSubmissionDataActions event handler has finished and that the
ApprovalInitiation is pending.












Oracle Identity Manager 11gR2PS2 New Diagnostics capabilities
6
To be able to get the details about the related approval workshop, back on the Dashboard, we
have to click on the Context ID link:

It drives to the Associated Workflows dialog box.


Clicking on the link opens another tab in the browser which shows the details of the called
SOA Composite in charge of the approval workflow.
Oracle Identity Manager 11gR2PS2 New Diagnostics capabilities
7


The ApprovalProcess link leads to the details of the BPEL process by itself.


The Flow tab is giving a nice graphical view of the orchestration steps:

Oracle Identity Manager 11gR2PS2 New Diagnostics capabilities
8


To see the data associated with a step you just have to click on its icon (here
InvoqueRequestDetailsOperation).


Oracle Identity Manager 11gR2PS2 New Diagnostics capabilities
9
The requested VPN Access entitlement is clearly visible in the data flow.


Looking to the task just before getting the approver response, we can see that Danny Crane
(DCRANE in the screenshot) is the person that should approve or reject the request:



Back to the Dashboard, clicking on the EDID link of the pending operation opens the details:



Here we can see the several entries of the diagnostic log:

Oracle Identity Manager 11gR2PS2 New Diagnostics capabilities
10

It is possible to filter to the most significant alerts selecting for example Incident Error, Error
and Warning check boxes.



We can select in the Operations tab some specific operation and see what handlers have been
configured:
Oracle Identity Manager 11gR2PS2 New Diagnostics capabilities
11



Instances tab is like the Dashboard one but with search capabilities:



Let's take the opportunity to grab some details about the Set Challenge Question Answers
operation:

Oracle Identity Manager 11gR2PS2 New Diagnostics capabilities
12

The event handlers that have been called are shown:


Closing the request

To close the request, we connect as Danny Crane, open the Indox, and after selecting the
pending request approve it:










Oracle Identity Manager 11gR2PS2 New Diagnostics capabilities
13
The entitlement should have been given to Sally Downs:

















Final views in the Dashboard
The operation should have the COMPLETED status:















Oracle Identity Manager 11gR2PS2 New Diagnostics capabilities
14
Confirmation of the ending of the BPEL workflow could be gathered from Enterprise Manager
(noticing the COMPLETED entry):


















Conclusion
This ends the illustration of the diagnostics capabilities offered by OIM 11gR2PS2 in Enterprise
Manager, such as:

Details of the OIM internal operations

Drilling logs

Complete view of the approval BPEL workflow in relationship with OIM operations.
This feature allows end-to-end tracking of OIM operations including approval BPEL
orchestration steps.





Oracle Identity Manager 11gR2PS2
New Diagnostics Capabilities
September 2014
Author: Michet Hascot
Oracle Corporation
World Headquarters
500 Oracle Parkway
Redwood Shores, CA 94065
U.S.A.
Worldwide Inquiries:
Phone: +1.650.506.7000
Fax: +1.650.506.7200
oracle.com
Copyright 2014, Oracle and/or its affiliates. All rights reserved. This document is provided for information purposes only and the
contents hereof are subject to change without notice. This document is not warranted to be error-free, nor subject to any other
warranties or conditions, whether expressed orally or implied in law, including implied warranties and conditions of merchantability or
fitness for a particular purpose. We specifically disclaim any liability with respect to this document and no contractual obligations are
formed either directly or indirectly by this document. This document may not be reproduced or transmitted in any form or by any
means, electronic or mechanical, for any purpose, without our prior written permission.
Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.
AMD, Opteron, the AMD logo, and the AMD Opteron logo are trademarks or registered trademarks of Advanced Micro Devices.
Intel and Intel Xeon are trademarks or registered trademarks of Intel Corporation. All SPARC trademarks are used under license
and are trademarks or registered trademarks of SPARC International, Inc. UNIX is a registered trademark licensed through X/Open
Company, Ltd. 1010

You might also like