Sun Identity Manager 8.1 Resources Reference

Account Attributes

Default Attribute

The following table lists the default Oracle ERP account attributes. All attributes are optional.

Resource User Attribute  

Data Type  

Description  

owner

string 

The administrator who created the account. 

start_date

string 

The date the account is effective. 

end_date

string 

The date the account expires. 

Set the date to a previous date to disable an account. 

Specify a null value to indicate no expiration date.

Use the sysdate or SYSDATE keyword with end-date to specify an expiration date for a user with the local time of the Oracle EBS server.

description

string 

A description of the user, such as the full name. 

password_date

string 

The datestamp of the last password change. 

The Oracle ERP adapter can use this datestamp when evaluating the password_lifespan_days attribute value. For example if you set the password_lifespan_days attribute to 90, then Oracle ERP will calculate 90 days out from the last password change date (password_date) to determine if the password is expired. 

Each time the Oracle ERP adapter performs a password change, it will set the password_date to the current date. 

password_accesses_left

string 

The number of times the user can use the current password. 

password_lifespan_accesses

string 

The number of accesses over the life of the password 

password_lifespan_days

string 

The total number of days the password is valid. 

employee_id

string 

Identifier of employee to whom the application username is assigned. 

employee_number

string 

Represents an employee_number from the per_people_f table.

When you enter a value on create, the adapter tries to look up a user record in the per_people_f table, retrieve the person_id into the create API, and insert the person_id into the fnd_user table’s employee_id column.

If no employee_number is entered on create, no linking is attempted. 

If you enter an employee_number on create and that number is not found, then the adapter throws an exception. 

The adapter will try to return the employee_number on a getUser, if employee_number is in the adapter schema.

person_fullname

string 

The full name of the user. 

npw_number

string 

Contingent worker number. It represents an npw_number from the per_people_f table.

When you enter a value on create, the adapter tries to lookup a user record in the per_people_f table, retrieve the person_id into the create API, and insert the person_id into the fnd_user table’s employee_id column.

If no npw_number is entered on create, no linking is attempted.

If you enter an npw_number on create and that number is not found, then the adapter throws an exception.

The adapter will try to return the npw_number on a getUser, if npw_number is in the adapter schema.

Note: The employee_number attribute and npw_number attribute are mutually exclusive. If both are entered on create, employee_number takes precedence.

email_address

string 

The e-mail address of the user. 

fax

string 

The fax number of the user. 

customer_id

string 

The customer ID of the user. 

supplier_id

string 

The supplier ID of the user. 

responsibilities

string 

The names of the responsibilities assigned to the user. Valid for Oracle EBS 11.5.9 only. 

Use the sysdate or SYSDATE keyword with to_date to specify an expiration date for a responsibility with the local time of the Oracle EBS server.

responsibilityKeys

string 

The keys associated with the user’s list of responsibilities. 

securingAttrs

string 

Adds supports for securing attributes. 

expirePassword

boolean 

Indicates whether the password will be expired. 

directResponsibilities

string 

Returns the user’s direct responsibilities. Valid for 11.5.10 only. 

indirectResponsibilities

string 

Returns the user’s indirect responsibilities. Valid for 11.5.10 only. 

Additional Attributes

The Oracle ERP adapter allows you to add several read-only attributes that Identity Manager can use to audit changes to responsibilities. The values returned in the auditorResps attribute are the active responsibilities for that user. Except for auditorObject, all other attributes listed in the following table are aggregates of each responsibility’s sub-items, minus any menu and function exclusions that may exist.

The auditorObject attribute may be added as well. See Auditing Responsibilities for details about this atttribute.

The following table lists attributes that may be added to the schema map.

Attribute  

Description  

auditorResps

List of a user’s Active Responsibilities. 

formIds

Concatenates all Form IDs. Includes values returned by readOnlyFormIds and readWriteOnlyFormIds. 

formNames

Concatenates all Form Names. Includes values returned by readOnlyFormNames and readWriteOnlyFormNames/ 

functionIds

Concatenates all Function IDs 

functionNames

Concatenates all Function Names 

menuIds

Concatenates all Menu IDs 

readOnlyFormIds

Concatenates all Read-Only Forms IDs 

readOnlyFormNames

Concatenates all Read-Only Form Names 

readOnlyFunctionNames

Concatenates all Read-Only Function Names 

readOnlyUserFormNames

Concatenates all Read-Only User Form Names 

readWriteOnlyFormIds

Concatenates all Read/Write-Only Forms Ids 

readWriteOnlyFormNames

Concatenates all Read/Write-Only Form Names 

readWriteOnlyFunctionNames

Concatenates all Read/Write-Only Function Names 

readWriteOnlyUserFormNames

Concatenates all Read/Write-Only User Form Names 

userFormNames

Concatenates all User Form Names. Includes values returned by readOnlyUserFormNames and readWriteOnlyUserFormNames/ 

userFunctionNames

Concatenates all User Function Names 

userMenuNames

Concatenates all User Menu Names. 

The Oracle ERP adapter can support any additional custom attributes by using before and after actions for create and update, and by using a custom getUser action. See Using Resource Actions for more information.