Handling of Race Conditions

1-6 Oracle Fusion Middleware Administrators Guide for Oracle Identity Manager When auto retry is configured, the reconciliation engine checks for the race conditions. If a race condition is found, then the reconciliation engine puts the reconciliation event in a re-evaluate queue until the retry count is exhausted. A Reconciliation Retry Scheduled Task periodically checks if there is any event waiting for retry and is ready to be re-evaluated and if yes, it queues them up for reconciliation engine processing. This scheduled task is configured by default. Auto retry can handle the following race conditions: ■ An account event for creating an account in Oracle Identity Manager is processed before the user is created for this event because the event for creating user is not processed yet. ■ A user event for creating a Xellerate user in Oracle Identity Manager is processed before the organization is created to which this user belongs. Except for the CurrentRetryCount parameter, all other auto retry parameters are stored as part of the reconciliation profiles. This means that while the events belonging to one reconciliation run may have auto retry configured, the events belonging to another reconciliation run may not have auto retry configured. In Oracle Identity Manager 11g Release 1 11.1.1, there is no UI to manage these parameters within a profile and you must use an XML editor to manage them by directly editing the XML profile. For information about editing an XML profile, see Updating Reconciliation Profiles on page 1-15.

1.1.3.3 OES Integration

The event management APIs, the reconciliation APIs, and the UI to manage reconciliation events are protected by using authorization policies. Oracle Entitlements Server OES is the Oracle product that is used to control authorization policies. The default authorization policy for reconciliation specifies that only users with the RECONCILIATION ADMINISTRATORS or SYSTEM ADMINISTRATORS role are able to access and use reconciliation. Note: ■ If the auto retry count is exhausted, the reconciliation engine does not further process the event and sets the status per the matching rules. However, you can manually retry by requesting for re-evaluate from Event Management. For information about re-evaluating events, see Re-evaluating Events on page 1-11. ■ During the retry, if the event is successfully processed, then the value of the CurrentRetryCount parameter is reset to 0. See Also: Parameter to Control AutoRetry on page 1-3 for information about auto retry parameters Note: More information about OES is available in the following URL: http:www.oracle.comtechnetworkmiddlewareoesove rviewindex.html Managing Reconciliation Events 1-7

1.1.3.4 Ad Hoc Linking

If the reconciliation engine is not able to determine the owner based on the matching rules, then you can manually link an account to a user by using Oracle Identity Manager Advanced Administration. Subsequent modifications to the account is automatically linked to that account. Ad hoc linking is supported for user and account events. If the reconciliation engine is not able to determine the owner based on the matching rules, then you can manually link a user or account event to a user.

1.2 Event Management Tasks

You can perform the following event management tasks by using the Event Management section of Oracle Identity Manager Advanced Administration: ■ Searching Events ■ Displaying Event Details ■ Determining Event Actions ■ Re-evaluating Events ■ Closing Events ■ Linking Reconciliation Events

1.2.1 Searching Events

You can display a summary of reconciliation events by performing the following types of search: ■ Performing a Simple Search for Events ■ Performing an Advanced Search for Events

1.2.1.1 Performing a Simple Search for Events

To perform a simple search for events: 1. Login to Oracle Identity Manager Advanced Administration.

2. In the Welcome page, under Event Management, click Search Reconciliation

Events . Alternatively, you can click the Event Management tab, and then click Reconciliation . 3. In the left pane, enter a search criterion in the Search field. You can include wildcard characters in your search criterion. See Also: ■ Managing Authorization Policies in the Oracle Fusion Middleware Users Guide for Oracle Identity Manager for detailed information about authorization policies ■ Managing Roles in the Oracle Fusion Middleware Users Guide for Oracle Identity Manager for information about how to assign roles to a user See Also: Ad Hoc Linking on page 1-13 for information about how to perform ad hoc linking