Updating oracle.iam.ui.view.war file in Weblogic Deployments | OIM

Updating the war file in weblogic deployments involve following steps: 


- Modify the war file.
- Do not extract the content of the file at any cost. Do not use unzip-zip or jar -xvf/cvf commands.
- Use winRAR archiver to explore/update/delete the content of the file.
- If you wish to update (edit) a file in winRAR, do not remove and edit the file; instead you can edit it in the winRAR itself.
- After updating the oracle.iam.ui.view.war, place that file in the required location on both the OIM servers.
- Go to weblogic console > deployments. Check oracle.iam.ui.view.war file and select Update.
- Check both self-service.ear and sysadmin.ear files, when it asks for re-installation to make use of the updated library (oracle.iam.view.war).
-  After completing the update process, activate the changes.
- Though oracle says "Changes are activated and no restart is necessary", you will have to restart OIM servers.
- Now your changes must be in effect.


________________________________________________________________________________

oracle.iam.ui.view.war file needs to be updated for any customization related to front end consoles.

Customizations related to:
1. Introducing an image on any page
2. Editting Forgot Password/ Forgot ID flows, etc.

________________________________________________________________________________

Jar commands like jar -cvf and jar -xvf commands can be used to modify oracle.iam.ui.custom-dev-starter-pack.war without any issues. But use the winRAR or 7zip for safe modification.
However, if used for oracle.iam.ui.view.war file, the size may shrink and the process may change its manifest file to wipe out version information. This can create issues for the applications oracle.iam.consoles.identity.self-service.ear and oracle.iam.consoles.identity.sysadmin.ear.

Request Details OIM SOA BPEL cannot be seen

When user requests a role or any entity from catalog for other user, after submitting, request status goes to Request Failed with the following message:

IAM-2050014 : An error occurred while initiating approvals for request 00000. The corresponding error message is java.lang.RuntimeException: Caller doesn't have enough permission to call this method.

SOLUTION:

In Enterprise Manager,

Go to OIMDomain > MBean Browser > Application Defined MBeans > oracle.iam > server: oim_server1 > Application: oim > XMLConfig > Config > XMLConfig.SOAConfig > SOAConfig > username

In OID, give appropriate permission to this user (eg. weblogic_idm) and make sure that the user is a part of Administrators Group*.

* >> (**just for reference**)

In enterprise manager if you go to >>> Weblogic Domain > OIMDomain > security > Application Roles > (Select soa-infra in Application Stripe) search 

 ....for SOAAdmin SOAOperator and SOAMonitor, you can find Administrators Group in the membership * 

_______________________________

Also,

if you approve the request and entity does not show up in the user profile: check the OIMFrontEndURL in Enterprise Manager. It should be a server URL and not any load balancer or proxy url.

_______________________________