Skip to Main Content

Security Software

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

OIM 11g - Access Policy Based Provisioning

user90210Nov 15 2010 — edited Nov 15 2010
All,

We are running the following bulk proviisoning use case:

1. User Provisioning at 2 users per second rate.

The SOT posts a JMS message to an JMS queue. We have a custom MDB which reads the message and creates a recon event out of the message. Once user is created via re-conciliation, access policy gets triggered to provision a account to the user.

We observed that for most of the users there is a lag between the time at which the user was created and the time at which the resource actually got provisioned, which gives me a feeling that the policy evaluation is not happening instantly! e.g for some users the usr_create was 1 PM and the time of the "Create User" task in the resource history was 2 PM.

We have not enabled "Offline Provisioning". I see that there is a lot of message exchange going on in the oimkernelqueue.

Is this expected behaviour?
Comments
Locked Post
New comments cannot be posted to this locked post.
Post Details
Locked on Dec 13 2010
Added on Nov 15 2010
2 comments
149 views