Quantcast
Channel: Software Communities : Discussion List - Dell One Identity Manager
Viewing all 379 articles
Browse latest View live

Data import - update existing employees

$
0
0

Hi.

 

When I try to import employees through Data Import tool, I get following error: Employees: Value in field Personnel number must be unique. Object Lastname, Firstnamealready has this value (5363657226). It is true that an employee with the same Personnel number exists. Data Import should just update that person if data has changed in HRM.

 

I have also set search criteria to Personnel Number <> Employee number. What could be wrong? Did I miss something?

 

Thanks.

Evgen


IIS - Active Directory SSO to Intranet Q1 Server not working

$
0
0

Gurus,

I hate to open a new question when the other one I have is still open but I need to figure something out pretty soon with our IIS server. Again, we have the PRD, TST and DEV environments. I keep these as identical as possible via Database Transport but this is an IIS issue so there is no easy copy to replicate. Basically, in the PRD environment, if someone launches the QIM server in a Web browser, the page opens, reads AD credentials and everything is just fine. When I try to open the QIM server in Test, I am instantly taken to a login form and it does not accept anything I put in the credentials form. Then, when I try the same exact task on our Dev environment, it takes me straight to a basic authentication window that pops up in IE and again, nothing entered here will work.

 

I verified that the IIS config has the Windows auth enabled on the Quest application and on the default site in both instances. As a troubleshooting step, I disabled all login types but Windows Auth on both instances. The Test lab still prompts for credentials and the Dev lab still prompts with the Windows Auth login. The sites for both of these servers are listed as "Intranet sites" so I know it isn't an IE Permissions issue. I also get similar responses when I try to access the servers via Firefox and Chrome.

 

What am I missing here? The Director of my department wants to see some demos of new functions quickly and I am having little luck getting support in other ways. Please advise how to fix or what I might need to do. I don't see anything in the IIS settings on PRD that jumps out as different from these two environments but I may just be missing something.

How to assign approval workflow to 'Add New Employee' in ITShop

$
0
0

So I've done workflows for all different requestable items, but either forgot or can't figure out how to tie an approval workflow to adding a new employee in ITShop. Is this possible (I know pretty much everything is in q1im)? Or does the workflow have to be tied to a requested role or resource only after the employee is created? I have the following use case:

 

-If requester is vendor manager, allow add new employee automatically

-If requester is vendor representative, requires vendor manager approval

 

Thanks again for any insight or reminding me that I need to go back to the basics on this!!

 

Kenny

Question: FSMShare table not found in object browser

$
0
0

Hey guys,

 

my customer wants to create the directories (for this I use the FileComponents in the processes)  if a new AD group is ordered in the IT Shop. For this the requester needs to choose the existing shares and for this we would need the table for shares. In the SQL Management Studio I found the table FSMShare which seems to be the table we need. But neither I could find the table in the Object Browser nor in Designer or Manager. So my question is, how I can create entries in this table and use them, if I cannot find them in the Manager, Designer or Object Browser?

 

Kind regards and have a nice weekend

Georg

Question: Exchange 2010 email policies and maybe missing step in Mailbox_Enabled chain

$
0
0

Hi everybody,

 

the customer has round about 30 email policies how to create a mailadress. And he rather wants maintain them all in the little windows in the exchange management console than my suggested little script with 30 IfElse conditions. My question: Have I overlooked a solution? I checked the documentation and we are not able to synchronize the policies for adressgeneration into the Q1IM. (in the standard)

 

My solution is now a changed Enable Mailbox chain, were I get the single property "MailAdress" directly after the "Enable Mailbox" step so I get the adress the exchange server generated after ADSAccount was updated with a new Alias.

When I got the mailadress the "Get Proxy Adress" step runs and then is something missing in the standard: The output value "ProxyAddress" with the new proxyadresses (in one string) is not saved on the ADSAccount object but only used for the "Update Mailbox" step. Is this supposed to be this way? Because I changed it the way that the proxyadresses are saved on the object (via SQL statement).

 

Does anybody has suggestions or a better idea to solve the problem, that the customer wants to get the mailadress from the exchange server?

 

Kind regards

Georg

Lock accounts of employees that have left the company & resources

$
0
0

Hi everyone.

 

I have two resources: one for AD account and one for Exchange mailbox. For both resources there is an option "Inherit resources if permanently disabled" is set. When I fire process plan "Lock user accounts from dismissed employees", all employees with expired accounts are disabled. AD account resource for these employees is inherited, but Exchange mailbox resource is not. An option "No inheritance" for employees is not set.

 

If I permanently disable an employee manually, both resources are inherited - and this is what I want.

 

Is this normal behaviour? If yes, how could I prevent removing Exchange mailbox resource after Lock user accounts from dismissed employees executed?

 

Thanks for help,

Evgen

how to write a multivalue attribute in Active Directory

$
0
0

Hi All,

 

I´m modifying the script VI_CreateADSGroupFromPWO (copy and create a new one) and I would like to write information into a multi-value AD attribute. Right now, the script is passing correctly the data as a single value, but what would be the separator or the Visual Basic sintaxis to create a multi-value attribute?

 

This is what I have, I tried to use ";" as a separator but is not working. ProxyAddr would be the multivalue attribute in AD

 

email = OFC_ValidCharacterCheck(groupname) + "@" + Connection.GetConfigParm("Custom\AON\DefaultMailDomain")

ADGroup.PutValue("Mail", email)

proxyAddr = "SMTP:" + email + ";" + "smtp:" + AON_ValidCharacterCheck(groupname) + "@test.com"

ADGroup.PutValue("OFC_Custom_ProxyAddresses", proxyAddr)

 

Any idea would be much appreciated.

 

Regards.

Deeplinking into the IT Shop with the authentication module "Person (role-based)"

$
0
0

Hi there,

 

I have a problem using deeplinks for the IT shop by using the authentication Module "Person (role-based)".

 

It does not seem to be possible to put a deeplink, because after entering the login data the user is always redirected to the homepage. After the user got a session everything works fine but it should also work with the first link.

 

With the authentification module "ADSAccount (rolebased)"  the problem does not exist and the user is directed to the requested page directly.

 

Is it possible get the same behaviour with a none-sso-authentification-module?



Version is 5.1

 

Thx in advance and best regards

 

Martin


Adding price to IT-shop request form

$
0
0

Hi,

 

I'm trying to add a price to the Product request form. I just can't find the correct place from Web Designer. Can you help me out?

 

Best Regards

Miska Siirto

Deploy language pack on Q1IM 6.1.1

$
0
0

Hi all,

I downloaded a few days ago a language pack for Q1IM.

This package contains CSV files (one per language) to translate the portal.

What should I do to import it ?

Thanks for your help,

Steph.

Deferring "Check IT Shop for Approvals" because there are still approvals for requests in the job queue

$
0
0

We are seeing this message in the Journal for the DB Queue, yet I don't see any approvals in teh Job Queue.  Does anyone have thoughts on what might be happening?

 

 

image001.png

Web Designer - Dynamic control depending on a value of some attributes

$
0
0

I would like to design a form to creare person.

This form should be dynamically modified depending on the type of employee created.

The type of employee should be one of the first attribute of this form.

=> Is it possible ?

Thank you for your help,

Seph.

DataBase Schema - viPWOOrderPerson view ?

$
0
0

Hi all,

I was asked to use the viPOWOrderPerson view to get a list of the assignations a person has.

Do you know where can I find a definition for the content of this view : viPOWOrderPerson ?

Thanks,

Steph.

Designer - Manager Not Added to Person Record

$
0
0

Gurus,

I am back again with another one of those custom script questions. It seems that one of my Quest engineers is on vacation and the other is on the first week of an engagement so I have no idea when they might be able to help me. The problem I have now is that in my Development lab, none of the Person records have a Manager assigned to them. I know that the ADSAccount table is storing the user's manager in the UID_ADSAccountManager field and 90% of the accounts have a manager assigned. The problem is that the value for the manager is not being stored in the Person table and I have no idea why. Much like my other problems, this same symptom does not appear in the PRD database which was almost entirely created by Quest engineers. Yet, I would think that if we transported all changes from one system to the other, the code would still work.

 

Here is what I do know. We have two custom scripts that are all about user records. The first one is QC1_PersonAuto_ADS which basically delivers the users from ADSAccount, filters the accounts we are not interested in and then puts the remainder in Person table. This particular one is connected to the ADS/EX2K_ADSAccount_Insert/Update process. Then, we have a QC1_AD_Department_Import file that basically looks at one of our custom AD Attribs and populates the Department field. Lastly, there is a QC1_UpdatePersonDepartment_FromADS which serves the purpose of assigning the user to the department to which they belong. These scripts all seem to work and the values are there but the Manager is not populated.

 

We also have a script called QC1_PersonUpdate_ADS but it currently does not appear to be linked to any schedule or process plan.There is a possibility that this is the script that needs to be run to populate manager, I do see a section in the code that says this:

 

VID_PutValueSafe(Person, "UID_PersonHead", Connection.GetSingleProperty("ADSAccount", "UID_Person", f.Comparison("UID_ADSAccount", Account.GetValue("UID_ADSAccountManager").String, ValType.String)).String)

Is this setting the Manager property for UID_PersonHead? If so, I need ot figure out how to get this script put into a process. I tried setting one up to do so but the other import process have some ParameterValue0, 1 and 2 set for different things and I am not sure what parameters I would want to set in these values to ensure that the data is properly imported.

 

Accordnig to what I have in the comments of the code mentioned above, this script ovverides the VI_PersonUpdate_ADS function. So if I were to set this script in the orchestration with the same parameters as the VI_PersonUpdate_ADS function, would it populate the proper values when orchestrated?

 

I know this is a huge and funky question but my knowledge of coding is very limited.

Best Practice: Insert a PWODecisionHistory record after executing the customizer-method "CreateITShopOrder"

$
0
0

Hi there,

 

I want to convert several PersonHasRessource (and actually PersonHasRessourceTotal) assignments to IT-Shop-Orders. I also want to use the customizer method CreateITShopOrder.

 

I've now created a custom script and give this as a parameter into the method call. So I can set more PWO attributes. Up to this point everything is perfect.

 

But, I also want to add an additional PWODecisionhistory record to give the users a better visualization in the Web-Frontend.

 

What is the best way here? How can I get the inserted PWO?

 

The method itself is invoked by a process based on object PersonHasRessource.

 

 

CreateITShopOrder.PNG

 

 

Another Question: What is best Practice for recalculation orders of inherited assignments? I think something like this: Create a direct assignment -> Run the Customizer-Method -> Cleanup the inherited assignments on the source.

 

And a last one: What happens in the method if the assignment is orderable in more than one itshop-structure for the user?

 

Thank you in advance and best regards

 

Martin


Multiple IT Shop approved requests sent to ServiceNow ecc_queue causing duplicate records (same timestamp)

$
0
0

Hello all,

 

I'm pretty sure I already know the answer to this but thought I'd throw this issue out there anyway. So when multiple items are approved in an IT shop request, event is triggered to 'Insert' to servicenow ecc_queue. All the information arrives to their queue correctly, but at the same exact time...causing duplicate records to be created based on their timestamp of when item was created. I did some research and found this link which I forwarded to the ServiceNow analysts (section 4.1)...

 

http://wiki.servicenow.com/index.php?title=Web_Service_Import_Sets

 

They are trying to apply the fix now but also asked me if there was a way Q1IM could send approved (multiple) requests to their queue at separate times (e.g. seconds apart). I'm thinking of how to customize something on our end and also what other behavior this may cause and am thinking it isn't really a Q1IM issue...but if I had to, would there be a way to do this? If I used process automation schedule to 'trigger' the event rather than EX approval workflow would the requests still be sent at the same exact time? Currently this is what happens...

 

-Request multiple items in IT Shop

-Initial approver approves

-EX approval triggers event 'ServiceNow'

-'ServiceNow' process runs ScriptExec for SN web service call and 'insert' to ecc_queue (UID_PersonWantsOrg passed in for each request)

 

-items received in ecc_queue each with separate UID and correct information, but same timestamp

-ServiceNow picks up items in queue and creates duplicate tickets with incorrect information due to having same timestamp created

 

...just trying to get all my ducks in a row just in case i'm asked to do any 'out of scope' work...

 

Thanks!!

 

Kenny

IT-shop and two domains

$
0
0

Hi everyone.

 

I'm trying to set IT-shop to authenticate users agains domainA or domainB. Users from domainA can be authenticated against domainA, but for domainB it doesn't work.

 

Both domains are connected to Q1IM. Users in domainB have assigned access to IT-shop in Q1IM. I have two testing users in domainB and both have valid account (date), accounts are not disabled, change password on next logon is not set.

 

In configuration parameters I have set parameter TargetSystem\ADS\AuthenticationDomains to domainA|domainB.

 

The error I get is: Your are not authorized to use this dabase.

 

Did I miss something?

 

Thanks for suggestions.

 

Best regards,

Evgen

Error since upgrade: Could not load file or assembly 'AE.Customizer'

$
0
0

Hello,

 

 

We recently upgrade Q1IM from 6.0.1 to 6.1.1. Since that we meet the error above when we try to run scripts.

 

Written error (in French):

[System.IO.FileNotFoundException] Impossible de charger le fichier ou l'assembly 'AE.Customizer' ou une de ses dépendances. Le fichier spécifié est introuvable.

 

Translated error:

[System.IO.FileNotFoundException] Could not load file or assembly 'AE.Customizer' or one of his dependencies. The system can not find the file specified.

 

Do you know if this error is a known issue? How we can fix it?

 

 

Regards,

Serge

Use a script to call an action within Q1IM

$
0
0

Is it possible to use a script (for instance PS) to trigger a process within Q1IM ?

If yes could you please provide me some example ?

Extending a custom view

$
0
0

Hi community!

 

We extended our database schema with a custom view. Now we need an additional column in this view, but the schema extension tool has no option to extend a view (tables only).

 

Can you give me a hint how to achieve this?

 

Thanks a lot!

 

Norbert

Viewing all 379 articles
Browse latest View live