Delete Identity - Provisioning Framework

[Former Member]

Hi,

i have imported the provisioning framework and added access control (Logged-in user - All users; Everybody) to the "Delete Identity" task. When i open WebUI go to manage tab and try to delete one person, another browser opens and asks for a personal number. I think i didnt type in a personal number for this identity. So i just can click on save or refresh. When i choose save, the identity is not deleted.

What i am doing wrong?

Best regards,

Philip

[paul_abrahamson_sap]

Have a look at the tasks below the Web-enabled task, and check if there's a delay before start on the 'Delete Identity' task following the 'Unassign roles' task.

If there's a delay it will place the task into the provisioning queue with a scheduled execution time

I've just done a test and the view mxpv_provision shows that the Delete identity action task which will do the physical deletion is scheduled to run three minutes later.

2072 33 Delete Identity Task group Expanded OK 17/01/2011 17:19:29 1 0 NULL 41497

2072 206 Delete Identity Task group Expanded OK 17/01/2011 17:19:29 1 0 NULL 41497

2072 207 Delete Identity Action task Ready to run 17/01/2011 17:22:33 1 0 NULL 41497

Hope this helps.

[Former Member]

Hi Paul,

all delay timers are lower than a minute. So i think its ok?

This is what i get in MXPV_PROVISION:

13831 531 Delete Identity Task group Ready to run 17.01.11 1 0 (null) 1433

13831 531 Delete Identity Task group Ready to run 17.01.11 1 0 (null) 1429

13831 531 Delete Identity Task group Ready to run 17.01.11 1 0 (null) 1432

13832 531 Delete Identity Task group Ready to run 17.01.11 1 (null) (null) 1430

Bg,

Philip

[Former Member]

Solved.

Solution can be found here

[|]

Br,

Philip

[Former Member]

Hi Philip,

We have the same task and this works for us. Are the tasks under it enabled and assigned to a dispatcher, is the dispatcher running and is there anything showing in the provisioning queue?

Cheers,

Ian

[Former Member]

Hi Ian,

you dont type in a personal number before saving?

I got 6 entries in the provisioning queue but i dont know why they are still here. One of them is "Write HCM Employee To SAP Master" and has a provisioningqueue size of 996. Thats another problem, this task doesnt work too. I tried to clean provisioning queue with the job, but there are still theses 6 entries.

Bg,

Philip

[Former Member]

Hi Phillip,

In our case, as the identities have come from HCM, the PERNR is populated, but I think we have tried with users where it is not, with the same result. The HCM employees job is moving the data from the HCM IdS to the main IdS, again it may be mssing a dispatcher set and so can't run? Is there as "Delete Identity" in your provisioning queue?

Cheers,

Ian

[Former Member]

Hi Ian,

i checked again.

Dispatcher --> Jobs all marked and applied.

Now there is nothing more in the provisioning queue, cause i deleted manually all entries in mxp_provision.

I tried to delete the Identity again, but theres again 1 entry in prov queue "Delete Identity" with no Job-Status.

To "change own data" for example works.

Bg,

Philip

[Former Member]

Hi again,

i testet my dispatcher and got the message

MXDispatcher:policy type is :1
Get Counts String: select actiontype, count(state) as count from mxp_provision with (nolock) where State IN (1, 2, 23, 24, 25, 26) and exectime<getdate() group by actiontype

Can this be a problem?

Bg,

Philip

[Former Member]

Hi Philip,

If you only get that line when you test your dispatcher, then you have a problem, you should get about 10 lines with "nothing to do" repeating. Do any other tasks run or is the deletion the only thing you are trying?

Cheers,

Ian

[Former Member]

Hi Ian,

i get these lines when i test my dispatcher (stop service and press test)

[18.01.2011 10:08:36-359] - MxDispatcher:All locked. Sleeping ...
[18.01.2011 10:08:39-328] - MxDispatcher:Executing 'getWaitingjobs'
[18.01.2011 10:08:39-390] - MxDispatcher:[Executions ]  - none:
[18.01.2011 10:08:41-359] - MxDispatcher:Executing clear old semas from IFCheck
[18.01.2011 10:08:41-609] - MxDispatcher:Executing set sema from IFCheck
[18.01.2011 10:08:41-609] - MxDispatcher:Policy type is :1
Get Counts String:select actiontype,count(state) as count from mxp_provision with (nolock) where State IN (1, 2, 23, 24, 25, 26) and exectime<getdate() group by actiontype
[18.01.2011 10:08:41-750] - MxDispatcher:Setting visited[0] to 1
[18.01.2011 10:08:41-750] - MxDispatcher:Setting visited[1] to 1
[18.01.2011 10:08:41-750] - MxDispatcher:Setting visited[2] to 1
[18.01.2011 10:08:41-750] - MxDispatcher:Setting visited[3] to 1
[18.01.2011 10:08:41-750] - MxDispatcher:Setting visited[4] to 1
[18.01.2011 10:08:41-750] - MxDispatcher:Picked up tasktype: -1
[18.01.2011 10:08:41-765] - MxDispatcher:All locked. Sleeping ...

Anything wrong there?

Bg,

Philip

[Former Member]

Hi Philip,

That doesn't look good! It should be more like

[18.01.2011 09:21:17-215] - MxDispatcher:Executing 'listSuitableTasks'

[18.01.2011 09:21:17-215] - MxDispatcher:[Evaluations] - trying to list tasks

[18.01.2011 09:21:17-215] - MxDispatcher:No tasks found ... nothing to do

[18.01.2011 09:21:17-215] - MxDispatcher:[Evaluations] - none

[18.01.2011 09:21:17-215] - MxDispatcher:Executing clear sema (44) from IFCheck

[18.01.2011 09:21:17-246] - MxDispatcher:Nothing to do. Sleeping ...

[18.01.2011 09:21:22-199] - MxDispatcher:Executing 'getWaitingjobs'

[18.01.2011 09:21:22-246] - MxDispatcher:Executing clear old semas from IFCheck

[18.01.2011 09:21:22-856] - MxDispatcher:[Executions ] - none:

[18.01.2011 09:21:22-871] - MxDispatcher:Executing set sema from IFCheck

[18.01.2011 09:21:22-871] - MxDispatcher:Policy type is

[18.01.2011 09:21:22-871] - MxDispatcher:Executing 'listSuitableTasks'

[18.01.2011 09:21:22-871] - MxDispatcher:[Evaluations] - trying to list tasks

[18.01.2011 09:21:22-887] - MxDispatcher:No tasks found ... nothing to do

[18.01.2011 09:21:22-887] - MxDispatcher:[Evaluations] - none

[18.01.2011 09:21:22-887] - MxDispatcher:Executing clear sema (44) from IFCheck

[18.01.2011 09:21:22-902] - MxDispatcher:Nothing to do. Sleeping ...

This would explain why your tasks weren't processing, unfortunately I don't know how to help get them to run though, sorry.

Good luck,

Ian