In online provisioning, multiple provisioning operations are performed in sequence. For example, if you create a request to allocate (provision) five resources to five OIM User, then the system:
Treats the provisioning of one resource to one user as a provisioning operation
Processes provisioning operations in sequence, one after the other
This chapter contains the following sections:
Note:
You might not need to enable offlining in Oracle Identity Manager 11g architecture, depending on your work flow. This feature may be obsolete in future.
The following are features of offline provisioning:
The offline provisioning approach is applied only during Provision (Create Target System Account) Resource, Enable Resource, Disable Resource, and Revoke Resource operations. The offline provisioning approach is not applied in a provisioning operation that involves modification of an allocated (provisioned) resource.
Offline provisioning is not applied during organization provisioning.
You enable offline provisioning at the resource object level. The procedure is described later in this chapter.
JMS messages generated during offline provisioning are processed in parallel. Processing of each JMS message is treated as a single transaction, and it is asynchronous and independent of other JMS messages. This approach provides better performance over the online provisioning approach in which provisioning operations are processed in sequence.
When you view the resource details for a resource instance of an OIM User, you can view the "Provisioning in Queue", "Enable in Queue", "Disable in Queue" and "Revoke in Queue" statuses for Provision, Enable, Disable, and Revoke operations respectively if provisioning for a particular resource has not yet been processed.
The final status of the resource instance is the same as the status for online provisioning. For example, if a message for a resource is processed successfully, then the Provisioned status is displayed. The same status is displayed for online provisioning.
In offline provisioning, details of failed messages are stored in the Off-line Persistent Store (OPS) table. You can view these details by running the Off-line Resource Provisioning Messages report. See "Reports Related to Offline Provisioning" for information about this report.
As mentioned earlier, you enable offline provisioning at the resource object level. Off-line provisioning is applicable only when the Auto Save Form option is already selected in the Process Definition form.
To enable offline provisioning:
Log in to Oracle Identity Manager Design Console.
Expand Resource Management, and double-click Resource Objects.
Search for and open the resource object for which you want to enable offline provisioning.
On the Resource Object form, select Off-line Provisioning. This enables off-line provisioning for enable, disable, and revoke resource operations.
When the Off-line Provisioning option is not selected, the specific resource provisioning, enable, disable, and revoke operations occur online.
Click the Save icon.
To disable offline provisioning:
Log in to Oracle Identity Manager Design Console.
Expand Resource Management, and double-click Resource Objects.
Search for and open the resource object for which you want to enable offline provisioning.
On the Resource Object form, deselect the Off-line Provisioning check box.
Click the Save icon.
When an online provision, enable, disable, or revoke operation fails, the error messages and other information about the operation are displayed on the UI. The Offline Resource Provisioning Messages report in Oracle BI Publisher stores all the error messages.
Configure the Remove Failed Off-line Messages scheduled task to schedule deletion of failed provisioning operations from the OPS table. While configuring this scheduled task, set a value for the Remove Failed Messages Older Than (days) attribute.
See Chapter 2, "Managing Scheduled Tasks" for information about working with scheduled tasks.