In-Depth: Synchronizing Oracle HRMS with OID
By Steven Chan - EBS-Oracle on Aug 17, 2006
Editor Jan. 12, 2007 Update: Oracle Identity Management 10g 10.1.4.0.1 is now certified with the E-Business Suite.
I've now devoted several articles to managing E-Business Suite users with Oracle Internet Directory 10g. But what about situations where you need to manage Oracle Human Resources employees in Oracle Internet Directory? Or create E-Business Suite accounts automatically for new employees? That's where the Oracle HR Agent comes into the picture.
For starters, let's distinguish between users and employees:
Employees aren't Necessarily Users
Not all employees are users, and vice versa. For example, a major retailer might use the E-Business Suite's Human Resources modules to manage employee information for their cashiers, but those cashiers may not be authorized to log into the E-Business Suite at all.
When Worlds Overlap
From an organizational standpoint, this distinction makes a lot of sense. The HR department manages employees, and the IT department manages E-Business Suite accounts.
But what happens when those worlds overlap? Following the example above, what about a scenario where the cashiers are permitted to view their payslips via the Self-Service Human Resources module?
In this scenario, the same person would be represented in two places:
- In the Human Resources module
- In the Apps FND_USER repository
Creating Employee Entries in Oracle Internet Directory
It's possible to use the Oracle Internet Directory Human Resources connector to push employee information from Oracle HR to Oracle Internet Directory.
You can schedule the Oracle Human Resources connector to run at any time, configuring it to extract incremental changes from the Oracle Human Resources system. You can also set and modify mapping between column names in Oracle Human Resources and attributes in Oracle Internet Directory.
Exportable HR Attributes
There's a long list of HR employee attributes that you can send to Oracle Internet Directory, including:
- First name, last name
- Date of birth
- Employee number
- Email address
If you recall from a previous article, you can synchronize user information between Oracle Internet Directory and the E-Business Suite's FND_USER like this:
This architecture would support a business flow where a new employee is registered in E-Business Suite Human Resources by the HR department. That employee's information is then propagated via Oracle Internet Directory to FND_USER, where an IT administrator grants the appropriate Apps responsibilities to the user.
The opposite direction is not supported. It is not possible to have an employee created in Oracle HR based upon a new user entry in Oracle Internet Directory.
Useful for You?
I've heard anecdotal reports that this is a common use case, but actual customer sightings of this in the wild have been rare. If you're using this setup now, or are interested in using this setup, please drop me a line; I'd be very interested in hearing about your requirements.
- Oracle Identity Management Integration Guide 10g (10.1.2.0.2)
- Integrating Oracle Human Resources with Oracle Application Server 10g (OTN Tutorial)
- In-Depth: Using Single Sign-On 10g with E-Business Suite Release 11i