LDAP Scheduled Tasks Scheduled Tasks

2-12 Oracle Fusion Middleware Administrators Guide for Oracle Identity Manager Table 2–3 LDAP Scheduled Jobs Scheduled Jobs Description User-Configurable Attributes Enabled By Default LDAP User Create and Update Reconciliation This scheduled job reconciles user updates based on the change log from LDAP. The LDAP User Create and Update Reconciliation scheduled job cannot reconcile the User Defined Fields UDFs. To enable this scheduled job to reconcile UDFs, export the dbLDAPUser and dbRA_LDAPUSER.xml files from MDS, make required configuration changes in the files, and import them back to MDS. See MDS Utilities and User Modifiable Metadata Files in the Oracle Fusion Middleware Developers Guide for Oracle Identity Manager for information about importing and exporting MDS files. Note: While modifying the files, you must not specify any spaces when providing attribute names in the profile. Last Change Number: Use this attribute to update the last change number of scheduled jobs with last changelog number value of Oracle Internet Directory. Batch Size: Use this attribute to fetch number of entries from the directory in each query. OIM User Type: Use this attribute to specify the user type, for example, End-User or End-User Administrator. OIM User Organization Name: Use this attribute to specify Oracle Identity Manager organization in which reconciled users will be created. OIM Employee Type: Use this attribute to specify the value of employee type for users that are created through reconciliation. No LDAP User Delete Reconciliation This scheduled job reconciles user deletes based on the change log from LDAP. Last Change Number: Use this attribute to specify the last changelog identifier processed by this job. Batch Size: Use this attribute to fetch number of entries from the directory in each query. No LDAP Role Create and Update Reconciliation This schedule job reconciles role creates or updates based on the change log from LDAP. Last Change Number: Use this attribute to specify the last changelog identifier processed by this job. Batch Size: Use this attribute to fetch number of entries from the directory in each query. No LDAP Role Delete Reconciliation This schedule job reconciles role deletes based on the change log from LDAP. Last Change Number: Use this attribute to specify the last changelog identifier processed by this job. Batch Size: Use this attribute to fetch number of entries from the directory in each query. No LDAP Role Membership Reconciliation This schedule job reconciles role membership based on the change log from LDAP. Last Change Number: Use this attribute to specify the last changelog identifier processed by this job. Batch Size: Use this attribute to fetch number of entries from the directory in each query. No Managing Scheduled Tasks 2-13 LDAP Role Hierarchy Reconciliation This schedule job reconciles role hierarchy based on the change log from LDAP. Batch Size: Use this attribute to fetch number of entries from the directory in each query. Last Change Number: Use this attribute to specify the last changelog identifier processed by this job. No LDAP User Create and Update Full Reconciliation This schedule job reconciles user creates or updates from LDAP, which includes all users under the search base that is defined in the Directory Server IT resource. Batch Size: Use this attribute to fetch number of entries from the directory in each query. OIM Use Type: User this attribute to specify the user type, for example, End-User or End-User Administrator. OIM User Organization Name: Use this attribute to specify Oracle Identity Manager organization in which reconciled users will be created. OIM Employee Type: Use this attribute to specify the value of employee type for users that are created through reconciliation. Yes LDAP User Delete Full Reconciliation This schedule job reconciles user deletes from LDAP. It detects the deleted users by comparing the users that exist in Oracle Identity Manager and LDAP. Batch Size: Use this attribute to fetch number of entries from the directory in each query. Yes LDAP Role Create and Update Full Reconciliation This schedule job reconciles role creates or updates from LDAP, which includes all roles under the search base that is defined in the Directory Server IT resource. Batch Size: Use this attribute to fetch number of entries from the directory in each query. Yes LDAP Role Delete Full Reconciliation This schedule job reconciles role deletes from LDAP. It detects the deleted roles by comparing the roles that exist in Oracle Identity Manager and LDAP. Batch Size: Use this attribute to fetch number of entries from the directory in each query. Yes LDAP Role Membership Full Reconciliation This schedule job reconciles role membership from LDAP. It detects the addition or deletion of role membership by comparing the entries existing in Oracle Identity Manager and LDAP. Batch Size: Use this attribute to fetch number of entries from the directory in each query. Yes LDAP Role Hierarchy Full Reconciliation This schedule job reconciles role hierarchy from LDAP. It detects the addition or deletion of role hierarchy by comparing the entries existing in Oracle Identity Manager and LDAP. Batch Size: Use this attribute to fetch number of entries from the directory in each query. Yes Fusion Applications Role Category Seeding This schedule job will query the LDAP system for all roles and find out their Role Category. If there are new role category in LDAP that are not in Oracle Identity Manager, it creates a new role category in Oracle Identity Manager. Start Change Log Number: Use this attribute to specify last changelog identifier processed by this job or starting identifier for next run. Yes Table 2–3 Cont. LDAP Scheduled Jobs Scheduled Jobs Description User-Configurable Attributes Enabled By Default 2-14 Oracle Fusion Middleware Administrators Guide for Oracle Identity Manager

2.3.3 Creating Custom Scheduled Tasks

Oracle Identity Manager provides you with the capability of creating your own scheduled tasks. You can create scheduled tasks according to your requirements if you choose not to use any of the predefined scheduled tasks listed in Table 2–2 . To create a custom scheduled task:

1. Create the scheduled task XML file and seed it in MetaData Store MDS.

2. Develop the schedule task class and package it in a Jar.

3. Upload the Jar by:

■ Using Plug-ins ■ Using Database Using Plug-ins You can upload the jar using the Plug-in Framework provided by Oracle Identity Manager. To upload the jar using plug-ins:

1. Create the plugin.xml file.

2. Create the directory structure plugin.zip for the scheduled task.

3. Upload the created plugin.zip in the Oracle Identity Manager database.

Using Database You can upload the jar in the database DB of Oracle Identity Manager. To upload the jar using DB: Upload the jar in DB using UploadJar utility. You can run this utility from the following location: OIM_HOMEbin

2.4 Jobs

As discussed in one of the earlier chapters, a job is a task that can be scheduled to run at the specified interval. A job run is a specific execution of a job. Each job run includes information such as the start time, stop time, job status, exceptions and status of the execution. This section discusses the following topics: ■ Creating Jobs ■ Searching Jobs ■ Viewing Jobs See Also: Developing Scheduled Tasks in the Oracle Fusion Middleware Developers Guide for Oracle Identity Manager for detailed information about creating a scheduled task See Also: Upload Jar Utility in the Oracle Fusion Middleware Developers Guide for Oracle Identity Manager for information about running the UploadJar utility Managing Scheduled Tasks 2-15 ■ Modifying Jobs ■ Disabling and Enabling Jobs ■ Deleting Jobs

2.4.1 Creating Jobs

To create a job: 1. Log in to Oracle Identity Administration with the appropriate credentials.

2. Click the System Management tab and then click Scheduler. Alternatively, you

can click the Search Scheduled Jobs link on Welcome Screen.

3. On the left pane, from the Actions list, select Create. Alternatively, you can click

the icon with the plus + sign beside the View list.

4. On the Create Job page, enter values in the following fields under the Job

Information section: ■ Job Name: Enter a name for the job. ■ Task: Specify the name of the scheduled task that runs the job. Alternatively you can search and specify a scheduled task. To search and specify a scheduled task: a. Click the magnifying glass icon next to this field.

b. In the Search and Select : Scheduled Task dialog box, specify a search

criterion for the scheduled task and click the icon next to Search field. A list of all scheduled tasks that meet the search criterion is displayed.

c. From this list, select the scheduled task that runs the job being created,

and then click Confirm. ■ Start Date: Specify the date and time on which you want the job to run. To do this, select the date and time along with timezone from the date editor and click Ok. By default, the timezone is UTC-08:00 US Pacific Time. ■ Retries: Enter an integer value in this field. This number represents the number of times the scheduler tries to start the job before assigning the Stopped status to the job. ■ Schedule Type: Depending on the frequency at which you want the job to run, select one of the following schedule types: – Periodic: Select this option if you want the job to be run at a time that you specify, on a repeating basis. If you select this option, then you must enter an integer value in the Run every field under the Job Periodic Settings section and select one of the following values: - mins - hrs - days Note: The procedure described in this section assumes that the XML file for the scheduled task, which contains the job description is available in the OIM_HOMEmetadatafile directory.