Since OIM is an enterprise-level identity management system that centrally administers user accounts and access privileges, OIM must also authenticate bidders.
Similar to Unifier users in an OIM-integrated environment, bidders can no longer change their passwords using the Unifier application interface. Bidders can only change their passwords from the OIM server, if the administrator has provided the OIM URL.
Note: If an Administrator or a bidder changes the first name, last name, or email address of a bidder in OIM, the records will not be updated in Unifier.
During bid invitation, Unifier creates bidders in OIM regardless of the bidders status (new or existing).
Notes:
- Administrators cannot provision bidders in OIM.
- Administrators cannot update, disable, or enable bidders in Unifier through OIM.
Workflow
- Prerequisites
- Reinstall and Reconfigure OIM Connector
- Disable Email Uniqueness Validation in OIM
- Import Configuration XML to create Scheduler Task
- Create Scheduler Job and specifying parameters
Prerequisites
Ensure that you have:
- OIM and Unifier installed and configured properly.
- The latest version of OIM Connector.
- Configured OIM and imported OIM Connector.
Reinstall and Reconfigure OIM Connector
Note: If you are installing the connector for the first time, you do not need to reinstall and configure the OIM connector. To continue, go to the "Disable Email Uniqueness Validation in OIM" section below.
- Stop the OIM Server. (For example: WebLogic OIAMDmain - Oracle_IDM2)
- Copy
OIMConnector.zip
to the local drive (on your PC or Server). The local drive is where you install and configure the OIM Connector - Unzip the zip file to local driver and name the folder (For example:
CONNECTOR_HOME
) - Copy
CONNECTOR_HOME/JavaTasks/primavera-unifier-oim-connector.jar
and paste toOIM_HOME/server/JavaTasks/
- Copy all the
jars
fromCONNECTOR_HOME/ThirdParty/
and paste toOIM_HOME/server/ThirdParty/
- Start the OIM Server (For example: WebLogic OIAMDmain - Oracle_IDM2)
- Log in to Identity System Administration with admin user’s credentials
- Click Import.
- Select configuration_data.xml (
CONNECTOR_HOME>/Resources/XML/configuration_data.xml
) to import
When the Deployment Manger - Import window opens:
- Verify details displayed under File Preview and click Add File
- Verify details displayed under Substitution and click Cancel Substitution
- Verify details displayed under Primavera Unifier IT Resource and click Cancel IT Resource Modification
- Verify details displayed under Current Selections
Note: You may need to expand Primavera Unifier Resource Object and Primavera Unifier Process selections.
- Right-click UD_PU_USERS and click Remove
- Ensure that you see the UD_PU_USERS file in the Objects Removed From Import section on the top right-hand corner of the Deployment Manger - Import window
- Click Import, wait until you see the confirmation message, and click OK
- Close the Deployment Manger - Import window
Disable Email Uniqueness Validation in OIM
By default, OIM prevents two users to have the same email address (email uniqueness). To change the default setting for email uniqueness, follow these steps:
- Log in to Oracle Identity System Administration
- Depending on the OIM version that you are using, click System Configuration or Configuration Properties.
- In the Search System Properties field enter *email* (include the asterisks, or stars)
- Press Enter on your keyboard or click the right-arrow icon to begin search
If property keyword OIM.EmailUniqueCheck
is not defined:
- Click Actions and select Create to open the Create System Property window.
- Provide the required system information to define a new property as follows:
- Property Name: Whether or not email should be validated for uniqueness
- Keyword: OIM.EmailUniqueCheck
- Value: FALSE
- When finished, click Perform
If property keyword OIM.EmailUniqueCheck
is defined:
- In the System Configuration pane (Search System Properties) click the keyword: OIM.EmailUniqueCheck
- Verify the information presented in the System Property Detail window to ensure that the Value is set to FALSE.
- Click Save to complete changing the default setting for email uniqueness
Update Email Notification Template to Support Internationalization (Optional)
- Log in to Oracle Identity System Administration.
- Depending on the OIM version that you are using, click System Configuration or Configuration Properties.
- Navigate to Notification.
- Select a notification template you want to modify.
- Click Actions >Open to open the template.
- Select a language tab and modify the template for that language.
- Click Save.
Import Configuration XML to create Scheduler Task
- Log in to Oracle Identity System Administration
- From the left-hand pane, click Import to open the Deployment Manager - Import window
At this point, the file selector window opens allowing you to select the XML file for import, by default.
Note: If the file selector window does not open, click Add File.
- Select the XML file to import (For example:
CONNECTOR_HOME/Resources/XML/Primavera_Unifier_Reconciliation_Task.xml
) - Review the details of the file that you want to import
- Click Add File to add the file to the Current Selections window (For example:
Primavera_Unifier_Reconciliation_Task.xml
) - Click Import and if prompted, confirm your selection
- When finished, click OK to complete the import process and close the Deployment Manager - Import window
Create Scheduler Job and specifying parameters
- Log in to Oracle Identity System Administration
- Click Scheduler
- In the Search Scheduled Jobs field enter * (asterisk or star) and click the right-arrow icon to see the existing Scheduled Jobs
- Click Actions and select Create to open the Create Job window
- Enter a name in the Job Name field (For example:
Primavera_Unifier_Reconciliation_Job
) - Click the magnifying glass (in front of the Task field) to open the Search and Select: Scheduled Task window
- In the Search field enter * (asterisk or star) and click the right-arrow icon to search and retrieve a list of all tasks
- Click to select your desired task (For example:
Primavera_Unifier_Reconciliation_Task
) and click Confirm to open the Create Job window - Review the contents of the Create Job window.
Note: The Create Job window has an additional section: Parameters.
- Complete the fields under Job Information, Job Periodic Settings, and Parameters, as follows:
- Start Date: Click the calendar icon and select a date (For example:
March 20, 2014 12:00:00 AM PDT
) - Retries: (For example:
0
) - Schedule Type: Select a desired option (For example:
Periodic
) - Run Every: Enter a time period (For example: 5 mins)
- OIM Installation Location: (For example:
/apps/Oracle/Middleware/Oracle_IDM2
) - OIM Server URL: (For example:
t3://slc05etq.us.oracle.com:14000
) - OIM Admin User Name: (For example:
xelsysadm
) - OIM Admin User Password: (For example: <password for xelsysadm user>)
- Unifier Server Protocol: (For example:
http
) - Unifier Server Host: (For example:
host-pc2
) - Unifier Server Port: (For example:
7001
) - Unifier Admin Comp Short Name: (For example:
pcc
) - Unifier Admin Comp Auth Code: (For example: <authentication code for pcc company>)
Note: The values of the following fields are the same values as in Primavera Unifier IT Resource.
- Unifier Server Protocol
- Unifier Server Host
- Unifier Server Port
- Unifier Admin Comp Short Name
- Unifier Admin Comp Auth Code
- Click Apply to complete creating a scheduler job