setting up plug-ins oracle flexcube universal banking release … · 2015-11-03 · follow the...

101
Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release 12.1.0.0.0 [October] [2015]

Upload: others

Post on 08-Jul-2020

6 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

Setting up Plug-Ins Oracle FLEXCUBE Universal Banking

Release 121000 [October] [2015]

1-1

Table of Contents 1 SETTING UP PLUG-INS 1-2

11 INTRODUCTION 1-2 12 INTEGRATING ORACLE FLEXCUBE UBS AND BPEL 1-2

121 Custom Provider Configuration 1-2 122 Configuring JPS 1-6 123 Configuring Work Flow Identity 1-7 124 Configuring Application Users and Policies 1-13 125 Configuring CIS 1-14 126 Configuring DBAdapter 1-14 127 Configuring JMS Adapter 1-16 128 Configuring FTP Adapter 1-49 129 BIP Interactive reports configuration 1-51 1210 BAM Report Configuration settings 1-64 1211 IPM configuration to edit the document 1-78 1212 Configuring Superviser Roles in EM 1-83 1213 Email Driver Configuration 1-88 1214 TimeOut Settings for BPEL 1-91

13 INTEGRATING ORACLE FLEXCUBE UBS AND SCHEDULER 1-98 131 Running Backend Scripts 1-98

14 INTEGRATING ORACLE FLEXCUBE UBS AND BIP REPORTS 1-98 141 Deploying Application Through Application Serverrsquos Admin Console 1-98

15 INTEGRATING ORACLE FLEXCUBE UBS AND MBEAN 1-98 151 Startup Script Modification 1-98

1-2

1 Setting up Plug-Ins

11 Introduction You need to carry out certain tasks manually before Oracle FLEXCUBE deployment This document details out the pre-deployment tasks based on the on the selected plug-ins

12 Integrating Oracle FLEXCUBE UBS and BPEL If you have created the EAR file with BPEL as a plug-in then along with the Oracle FLEXCUBE UBS EAR file the Installer creates lsquoFCBPELCISjarrsquo file You need to complete the following tasks before deploying Oracle FLEXCUBE UBS EAR file

121 Custom Provider Configuration

FCUBS Custom Authenticator Provider configuration has to be done from the weblogic console of SOA or manually update the configxml of the soa domain Below steps needs to be followed to setup Custom Authentication Provider

1 Along with FCUBS Ear file Installer creates FCUBSAuthenticationProviderjar file Copy this files to ltORACLE_HOMEgtwlserverserverlibmbeantypes

2 Restart the Admin Server 3 Login to the Console 4 Click on Security Realms

5 Click on myrealm

1-3

6 Click on Providers tab and click on new button to create new authentication provider 7 Give Provider name as FCJCustomProvider and type as FCUBSUserAuthenticator

8 Click Reorder to bring provider to first of all providers and click OK

1-4

9 Click on FCJCustomProvider 10 In Common tab change the control flag to ldquoSUFFICIENTrdquo

1-5

11 In Provider Specific tab

a) Set JNDIName as Flexcube JNDI Name b) If external authentications used in FCUBS then Fill the LdapMSAD related fields

12 For manually editing the configxml go to

ltORACLE_HOMEgtMiddlewareuser_projectsdomainsbase_domainconfig path Open configxml file The following codes need to be added at proper locations in the configxml a) Search for lt realmgt tag and add the following code between ltrealmgt and lt realmgt tagsThis should be the first child of the realm Node

ltsecauthentication-provider xmlnsn1=httpfcubsofsscomsecurity xsitype=n1fcubs-user-authenticatorTypegt

ltsecnamegtFCJCustomProviderltsecnamegt ltseccontrol-flaggtSUFFICIENTltseccontrol-flaggt ltn1msad-or-ldap-login-requiredgttrueltn1msad-or-ldap-login-requiredgt ltn1external-password-requiredgttrueltn1external-password-requiredgt ltn1authentication-typegtMSADltn1authentication-typegt

1-6

ltn1ldap-server-ip-and-portgtLDAPlocalhost389ltn1ldap-server-ip-and-portgt ltn1ldap-ssl-enabledgttrueltn1ldap-ssl-enabledgt ltn1security-authentication-typegtsimpleltn1security-authentication-typegt ltn1ldap-domain-namegtOFSSCOMltn1ldap-domain-namegt ltn1ldap-server-time-out-durationgt0ltn1ldap-server-time-out-durationgt

ltsecauthentication-providergt b) Make sure tag values matches the value given during Property file creation

122 Configuring JPS

For configuring JPS you need to follow the steps given below

1 Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

ltserviceProvider class=comofssfccbpelsecurityjpsserviceFCIdentityServiceProvider name=idstoredbprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt

ltserviceProvidergt

Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

ltserviceInstance provider=idstoredbprovider name=idstoredbgt

ltproperty value=flexcube name=subscribernamegt

ltproperty value=jdbcfcjdevDS name=datasourcegt

ltserviceInstancegt

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

2 Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

ltjpsContext name=flexgt

ltserviceInstanceRef ref=credstoredbgt

ltserviceInstanceRef ref=keystoredbgt

ltserviceInstanceRef ref=policystorexmlgt

1-7

ltserviceInstanceRef ref=auditdbgt

ltserviceInstanceRef ref=idstoredbgt

ltjpsContextgt

123 Configuring Work Flow Identity

You need to configure the workflow identity details from Enterprise Manager Console of the SOA To configure workflow identity details follow the steps given below

1 Login to EM Console Expand the SOA

2 Right click lsquosoa-infra(soa-server1)rsquo choose lsquoAdministrationrsquo and click lsquoSystem MBean Browserrsquo under it

1-8

3 Further under System MBean Browser go to lsquooracleassoainfraconfig gt Server soa_server1 gt WorkflowIdentityConfig gt human-workflowrsquo

4 Under the lsquoOperationsrsquo tab choose lsquocreateConfigurationrsquo option The following screen is displayed

5 Click lsquoInvokersquo button

1-9

The SOA displays the following confirmation message

Confirmation

Operation executed successfully

6 Refresh lsquoMBeanrsquo browser Go to lsquoWorkflowIdentityConfigConfigurationTypersquo under lsquohuman-workflowrsquo

7 Click lsquoNO_REALMrsquo On the right side select lsquoAttributesrsquo tab and change the value of lsquoDefaultrsquo from NO_REALM to lsquotruersquo

1-10

8 Further under the lsquoOperationsrsquo tab click lsquosetRealmNamersquo

9 The following screen is displayed

10 Specify the value of the parameter as lsquoflexcubersquo and click lsquoInvokersquo button

11 Refresh the lsquoMBeanrsquo browser Go to flexcube gt WorkflowIdentityConfigConfigurationTypeProviderType gt oraclesoamanagementconfigidentityProviderType Under the lsquoAttributesrsquo tab you need to make sure that the values of the following attributes are as per the table below

Attribute Value

Name JpsProvider1

1-11

PropertyType JPS

Service Identity

12 Under lsquoOperationsrsquo tab select the operation lsquoCreatePropertyrsquo and click lsquoInvokersquo button A new

Property is created under lsquoJpsProvider1rsquo

1-12

13 Select the new property and change its Name and Value

14 You can use the options lsquosetNamersquo and lsquosetValuersquo to update the name and value Change the name and value as per the following table

Name Value

jpsContextName flex

The value lsquoflexrsquo should match the value given for lsquojpsContextrsquo during JPS configuration

15 From the lsquoSystem MBean Browserrsquo select lsquojazncomrsquo

16 Under lsquoAttributesrsquo tab change the value of the attribute lsquoDefaultrsquo to lsquofalsersquo

1-13

17 Now restart the Weblogic and SOA servers After restarting the servers make sure the structure is as follows

124 Configuring Application Users and Policies To configure application policies refer the attached sample system-jazn-dataxml

system-jazn-dataxml

1 There are four ltapplicationgt in the ltapplicationsgt namely b2bui OracleBPMProcessRolesApp soa-infra and OracleBPMComposerRolesApp

2 Navigate to ltORACLE_HOMEgt user_projectsdomainsbase_domainconfigfmwconfig

3 Check system-jazn-dataxml available in this location whether ltapplicationgt is already available in the ltapplicationsgt

4 If the application is not available then paste the application content from the attached file inside the ltapplicationsgtltapplicationsgt

5 If the above mentioned ltapplicationgt is already there then replace the application content with the one available in the attached file

1-14

125 Configuring CIS

You need to configure the CIS details Follow the steps given below

1 Along with the Oracle FLEXCUBE UBS EAR file the Installer creates lsquoFCBPELCISjarrsquo file

2 Create a folder by name lsquoclassesrsquo at the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xrsquo

3 Extract the file lsquoFCBPELCISjarrsquo and copy the content of the folder lsquocomrsquo to lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassesrsquo

4 Now navigate to the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassescomofssfccbpelrsquo and delete the folders lsquodaorsquo and lsquosecurityrsquo

5 Navigate to the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassescomofssfccbpelcacrsquo Edit the properties file lsquoCISPropertiespropertiesrsquo and update lsquoJNDInamersquo with the JNDI name defined in the properties file lsquofcubspropertiesrsquo

6 Delete the folders CAC and soaext contents from the comofssfccbpel in FCBPELCISjar file location

7 Copy lsquoFCBPELCISjarrsquo to lsquoltMIDDLEWARE_HOMEgtuser_projectsdomainsltdomain_namegtlib

8 Once the above steps are completed restart the server

126 Configuring DBAdapter

In order to configure DBAdapter follow the steps given below

1 Log in to lsquoWeblogic Consolersquo and click lsquoDeploymentrsquo under lsquoDomain Structurersquo

1-15

2 In the Deployments table select lsquoDbAdapterrsquo You will be navigated to lsquoSettings for

DbAdapterrsquo

3 Click lsquoConfigurationrsquo tab and select lsquoOutbound Connection Poolsrsquo under it

4 Under lsquoGroups and Instancesrsquo click and expand lsquojavaxresourcecciConnectionFactoryrsquo

5 Click lsquoNewrsquo and select lsquojavaxresourcecciConnectionFactory in Outbound Connection Group

6 Define lsquoJNDI Namersquo as lsquoeisDBFCCDEVrsquo and click on lsquoFinishrsquo

1-16

The lsquojndi namersquo should be the same as the one in lsquoDbutility sub-processrsquo

7 Click lsquoDbAdapterrsquo again The new JNDI name is listed

8 Click on the hyperlink lsquoeisDBFCCDEVrsquo

9 Click the lsquoProperty Valuersquo field for the lsquoDataSourceNamersquo and update the application JNDI

reference (given in lsquofcubspropertiesrsquo file) and then press lsquoEnterrsquo key

10 Save and restart the Adminserver

127 Configuring JMS Adapter

Login in to console Click on JMS ServersNew

1-17

1-18

11 Please provide the below Name for JMS Server and select the file persistent store as belowNext

1-19

12 Select the target as SOA Server Finish

1-20

1-21

4 Go back to Console JMS ModulesNew

1-22

1-23

5 Create a JMS Module with the below NameNextSelect the target as SOA ServerFinish

1-24

1-25

1-26

6 Go back to JMS ModulesFCUBSJMSModuleNew

1-27

7 Click on Connection Factory nextCreate the connection Factory with the below NamesNext

1-28

1-29

8 Select Advanced targetingcreate New Sub Deployment with the below NameSelect the target as JMS server which we have created on topFinish

1-30

1-31

1-32

1-33

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 2: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-1

Table of Contents 1 SETTING UP PLUG-INS 1-2

11 INTRODUCTION 1-2 12 INTEGRATING ORACLE FLEXCUBE UBS AND BPEL 1-2

121 Custom Provider Configuration 1-2 122 Configuring JPS 1-6 123 Configuring Work Flow Identity 1-7 124 Configuring Application Users and Policies 1-13 125 Configuring CIS 1-14 126 Configuring DBAdapter 1-14 127 Configuring JMS Adapter 1-16 128 Configuring FTP Adapter 1-49 129 BIP Interactive reports configuration 1-51 1210 BAM Report Configuration settings 1-64 1211 IPM configuration to edit the document 1-78 1212 Configuring Superviser Roles in EM 1-83 1213 Email Driver Configuration 1-88 1214 TimeOut Settings for BPEL 1-91

13 INTEGRATING ORACLE FLEXCUBE UBS AND SCHEDULER 1-98 131 Running Backend Scripts 1-98

14 INTEGRATING ORACLE FLEXCUBE UBS AND BIP REPORTS 1-98 141 Deploying Application Through Application Serverrsquos Admin Console 1-98

15 INTEGRATING ORACLE FLEXCUBE UBS AND MBEAN 1-98 151 Startup Script Modification 1-98

1-2

1 Setting up Plug-Ins

11 Introduction You need to carry out certain tasks manually before Oracle FLEXCUBE deployment This document details out the pre-deployment tasks based on the on the selected plug-ins

12 Integrating Oracle FLEXCUBE UBS and BPEL If you have created the EAR file with BPEL as a plug-in then along with the Oracle FLEXCUBE UBS EAR file the Installer creates lsquoFCBPELCISjarrsquo file You need to complete the following tasks before deploying Oracle FLEXCUBE UBS EAR file

121 Custom Provider Configuration

FCUBS Custom Authenticator Provider configuration has to be done from the weblogic console of SOA or manually update the configxml of the soa domain Below steps needs to be followed to setup Custom Authentication Provider

1 Along with FCUBS Ear file Installer creates FCUBSAuthenticationProviderjar file Copy this files to ltORACLE_HOMEgtwlserverserverlibmbeantypes

2 Restart the Admin Server 3 Login to the Console 4 Click on Security Realms

5 Click on myrealm

1-3

6 Click on Providers tab and click on new button to create new authentication provider 7 Give Provider name as FCJCustomProvider and type as FCUBSUserAuthenticator

8 Click Reorder to bring provider to first of all providers and click OK

1-4

9 Click on FCJCustomProvider 10 In Common tab change the control flag to ldquoSUFFICIENTrdquo

1-5

11 In Provider Specific tab

a) Set JNDIName as Flexcube JNDI Name b) If external authentications used in FCUBS then Fill the LdapMSAD related fields

12 For manually editing the configxml go to

ltORACLE_HOMEgtMiddlewareuser_projectsdomainsbase_domainconfig path Open configxml file The following codes need to be added at proper locations in the configxml a) Search for lt realmgt tag and add the following code between ltrealmgt and lt realmgt tagsThis should be the first child of the realm Node

ltsecauthentication-provider xmlnsn1=httpfcubsofsscomsecurity xsitype=n1fcubs-user-authenticatorTypegt

ltsecnamegtFCJCustomProviderltsecnamegt ltseccontrol-flaggtSUFFICIENTltseccontrol-flaggt ltn1msad-or-ldap-login-requiredgttrueltn1msad-or-ldap-login-requiredgt ltn1external-password-requiredgttrueltn1external-password-requiredgt ltn1authentication-typegtMSADltn1authentication-typegt

1-6

ltn1ldap-server-ip-and-portgtLDAPlocalhost389ltn1ldap-server-ip-and-portgt ltn1ldap-ssl-enabledgttrueltn1ldap-ssl-enabledgt ltn1security-authentication-typegtsimpleltn1security-authentication-typegt ltn1ldap-domain-namegtOFSSCOMltn1ldap-domain-namegt ltn1ldap-server-time-out-durationgt0ltn1ldap-server-time-out-durationgt

ltsecauthentication-providergt b) Make sure tag values matches the value given during Property file creation

122 Configuring JPS

For configuring JPS you need to follow the steps given below

1 Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

ltserviceProvider class=comofssfccbpelsecurityjpsserviceFCIdentityServiceProvider name=idstoredbprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt

ltserviceProvidergt

Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

ltserviceInstance provider=idstoredbprovider name=idstoredbgt

ltproperty value=flexcube name=subscribernamegt

ltproperty value=jdbcfcjdevDS name=datasourcegt

ltserviceInstancegt

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

2 Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

ltjpsContext name=flexgt

ltserviceInstanceRef ref=credstoredbgt

ltserviceInstanceRef ref=keystoredbgt

ltserviceInstanceRef ref=policystorexmlgt

1-7

ltserviceInstanceRef ref=auditdbgt

ltserviceInstanceRef ref=idstoredbgt

ltjpsContextgt

123 Configuring Work Flow Identity

You need to configure the workflow identity details from Enterprise Manager Console of the SOA To configure workflow identity details follow the steps given below

1 Login to EM Console Expand the SOA

2 Right click lsquosoa-infra(soa-server1)rsquo choose lsquoAdministrationrsquo and click lsquoSystem MBean Browserrsquo under it

1-8

3 Further under System MBean Browser go to lsquooracleassoainfraconfig gt Server soa_server1 gt WorkflowIdentityConfig gt human-workflowrsquo

4 Under the lsquoOperationsrsquo tab choose lsquocreateConfigurationrsquo option The following screen is displayed

5 Click lsquoInvokersquo button

1-9

The SOA displays the following confirmation message

Confirmation

Operation executed successfully

6 Refresh lsquoMBeanrsquo browser Go to lsquoWorkflowIdentityConfigConfigurationTypersquo under lsquohuman-workflowrsquo

7 Click lsquoNO_REALMrsquo On the right side select lsquoAttributesrsquo tab and change the value of lsquoDefaultrsquo from NO_REALM to lsquotruersquo

1-10

8 Further under the lsquoOperationsrsquo tab click lsquosetRealmNamersquo

9 The following screen is displayed

10 Specify the value of the parameter as lsquoflexcubersquo and click lsquoInvokersquo button

11 Refresh the lsquoMBeanrsquo browser Go to flexcube gt WorkflowIdentityConfigConfigurationTypeProviderType gt oraclesoamanagementconfigidentityProviderType Under the lsquoAttributesrsquo tab you need to make sure that the values of the following attributes are as per the table below

Attribute Value

Name JpsProvider1

1-11

PropertyType JPS

Service Identity

12 Under lsquoOperationsrsquo tab select the operation lsquoCreatePropertyrsquo and click lsquoInvokersquo button A new

Property is created under lsquoJpsProvider1rsquo

1-12

13 Select the new property and change its Name and Value

14 You can use the options lsquosetNamersquo and lsquosetValuersquo to update the name and value Change the name and value as per the following table

Name Value

jpsContextName flex

The value lsquoflexrsquo should match the value given for lsquojpsContextrsquo during JPS configuration

15 From the lsquoSystem MBean Browserrsquo select lsquojazncomrsquo

16 Under lsquoAttributesrsquo tab change the value of the attribute lsquoDefaultrsquo to lsquofalsersquo

1-13

17 Now restart the Weblogic and SOA servers After restarting the servers make sure the structure is as follows

124 Configuring Application Users and Policies To configure application policies refer the attached sample system-jazn-dataxml

system-jazn-dataxml

1 There are four ltapplicationgt in the ltapplicationsgt namely b2bui OracleBPMProcessRolesApp soa-infra and OracleBPMComposerRolesApp

2 Navigate to ltORACLE_HOMEgt user_projectsdomainsbase_domainconfigfmwconfig

3 Check system-jazn-dataxml available in this location whether ltapplicationgt is already available in the ltapplicationsgt

4 If the application is not available then paste the application content from the attached file inside the ltapplicationsgtltapplicationsgt

5 If the above mentioned ltapplicationgt is already there then replace the application content with the one available in the attached file

1-14

125 Configuring CIS

You need to configure the CIS details Follow the steps given below

1 Along with the Oracle FLEXCUBE UBS EAR file the Installer creates lsquoFCBPELCISjarrsquo file

2 Create a folder by name lsquoclassesrsquo at the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xrsquo

3 Extract the file lsquoFCBPELCISjarrsquo and copy the content of the folder lsquocomrsquo to lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassesrsquo

4 Now navigate to the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassescomofssfccbpelrsquo and delete the folders lsquodaorsquo and lsquosecurityrsquo

5 Navigate to the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassescomofssfccbpelcacrsquo Edit the properties file lsquoCISPropertiespropertiesrsquo and update lsquoJNDInamersquo with the JNDI name defined in the properties file lsquofcubspropertiesrsquo

6 Delete the folders CAC and soaext contents from the comofssfccbpel in FCBPELCISjar file location

7 Copy lsquoFCBPELCISjarrsquo to lsquoltMIDDLEWARE_HOMEgtuser_projectsdomainsltdomain_namegtlib

8 Once the above steps are completed restart the server

126 Configuring DBAdapter

In order to configure DBAdapter follow the steps given below

1 Log in to lsquoWeblogic Consolersquo and click lsquoDeploymentrsquo under lsquoDomain Structurersquo

1-15

2 In the Deployments table select lsquoDbAdapterrsquo You will be navigated to lsquoSettings for

DbAdapterrsquo

3 Click lsquoConfigurationrsquo tab and select lsquoOutbound Connection Poolsrsquo under it

4 Under lsquoGroups and Instancesrsquo click and expand lsquojavaxresourcecciConnectionFactoryrsquo

5 Click lsquoNewrsquo and select lsquojavaxresourcecciConnectionFactory in Outbound Connection Group

6 Define lsquoJNDI Namersquo as lsquoeisDBFCCDEVrsquo and click on lsquoFinishrsquo

1-16

The lsquojndi namersquo should be the same as the one in lsquoDbutility sub-processrsquo

7 Click lsquoDbAdapterrsquo again The new JNDI name is listed

8 Click on the hyperlink lsquoeisDBFCCDEVrsquo

9 Click the lsquoProperty Valuersquo field for the lsquoDataSourceNamersquo and update the application JNDI

reference (given in lsquofcubspropertiesrsquo file) and then press lsquoEnterrsquo key

10 Save and restart the Adminserver

127 Configuring JMS Adapter

Login in to console Click on JMS ServersNew

1-17

1-18

11 Please provide the below Name for JMS Server and select the file persistent store as belowNext

1-19

12 Select the target as SOA Server Finish

1-20

1-21

4 Go back to Console JMS ModulesNew

1-22

1-23

5 Create a JMS Module with the below NameNextSelect the target as SOA ServerFinish

1-24

1-25

1-26

6 Go back to JMS ModulesFCUBSJMSModuleNew

1-27

7 Click on Connection Factory nextCreate the connection Factory with the below NamesNext

1-28

1-29

8 Select Advanced targetingcreate New Sub Deployment with the below NameSelect the target as JMS server which we have created on topFinish

1-30

1-31

1-32

1-33

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 3: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-2

1 Setting up Plug-Ins

11 Introduction You need to carry out certain tasks manually before Oracle FLEXCUBE deployment This document details out the pre-deployment tasks based on the on the selected plug-ins

12 Integrating Oracle FLEXCUBE UBS and BPEL If you have created the EAR file with BPEL as a plug-in then along with the Oracle FLEXCUBE UBS EAR file the Installer creates lsquoFCBPELCISjarrsquo file You need to complete the following tasks before deploying Oracle FLEXCUBE UBS EAR file

121 Custom Provider Configuration

FCUBS Custom Authenticator Provider configuration has to be done from the weblogic console of SOA or manually update the configxml of the soa domain Below steps needs to be followed to setup Custom Authentication Provider

1 Along with FCUBS Ear file Installer creates FCUBSAuthenticationProviderjar file Copy this files to ltORACLE_HOMEgtwlserverserverlibmbeantypes

2 Restart the Admin Server 3 Login to the Console 4 Click on Security Realms

5 Click on myrealm

1-3

6 Click on Providers tab and click on new button to create new authentication provider 7 Give Provider name as FCJCustomProvider and type as FCUBSUserAuthenticator

8 Click Reorder to bring provider to first of all providers and click OK

1-4

9 Click on FCJCustomProvider 10 In Common tab change the control flag to ldquoSUFFICIENTrdquo

1-5

11 In Provider Specific tab

a) Set JNDIName as Flexcube JNDI Name b) If external authentications used in FCUBS then Fill the LdapMSAD related fields

12 For manually editing the configxml go to

ltORACLE_HOMEgtMiddlewareuser_projectsdomainsbase_domainconfig path Open configxml file The following codes need to be added at proper locations in the configxml a) Search for lt realmgt tag and add the following code between ltrealmgt and lt realmgt tagsThis should be the first child of the realm Node

ltsecauthentication-provider xmlnsn1=httpfcubsofsscomsecurity xsitype=n1fcubs-user-authenticatorTypegt

ltsecnamegtFCJCustomProviderltsecnamegt ltseccontrol-flaggtSUFFICIENTltseccontrol-flaggt ltn1msad-or-ldap-login-requiredgttrueltn1msad-or-ldap-login-requiredgt ltn1external-password-requiredgttrueltn1external-password-requiredgt ltn1authentication-typegtMSADltn1authentication-typegt

1-6

ltn1ldap-server-ip-and-portgtLDAPlocalhost389ltn1ldap-server-ip-and-portgt ltn1ldap-ssl-enabledgttrueltn1ldap-ssl-enabledgt ltn1security-authentication-typegtsimpleltn1security-authentication-typegt ltn1ldap-domain-namegtOFSSCOMltn1ldap-domain-namegt ltn1ldap-server-time-out-durationgt0ltn1ldap-server-time-out-durationgt

ltsecauthentication-providergt b) Make sure tag values matches the value given during Property file creation

122 Configuring JPS

For configuring JPS you need to follow the steps given below

1 Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

ltserviceProvider class=comofssfccbpelsecurityjpsserviceFCIdentityServiceProvider name=idstoredbprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt

ltserviceProvidergt

Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

ltserviceInstance provider=idstoredbprovider name=idstoredbgt

ltproperty value=flexcube name=subscribernamegt

ltproperty value=jdbcfcjdevDS name=datasourcegt

ltserviceInstancegt

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

2 Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

ltjpsContext name=flexgt

ltserviceInstanceRef ref=credstoredbgt

ltserviceInstanceRef ref=keystoredbgt

ltserviceInstanceRef ref=policystorexmlgt

1-7

ltserviceInstanceRef ref=auditdbgt

ltserviceInstanceRef ref=idstoredbgt

ltjpsContextgt

123 Configuring Work Flow Identity

You need to configure the workflow identity details from Enterprise Manager Console of the SOA To configure workflow identity details follow the steps given below

1 Login to EM Console Expand the SOA

2 Right click lsquosoa-infra(soa-server1)rsquo choose lsquoAdministrationrsquo and click lsquoSystem MBean Browserrsquo under it

1-8

3 Further under System MBean Browser go to lsquooracleassoainfraconfig gt Server soa_server1 gt WorkflowIdentityConfig gt human-workflowrsquo

4 Under the lsquoOperationsrsquo tab choose lsquocreateConfigurationrsquo option The following screen is displayed

5 Click lsquoInvokersquo button

1-9

The SOA displays the following confirmation message

Confirmation

Operation executed successfully

6 Refresh lsquoMBeanrsquo browser Go to lsquoWorkflowIdentityConfigConfigurationTypersquo under lsquohuman-workflowrsquo

7 Click lsquoNO_REALMrsquo On the right side select lsquoAttributesrsquo tab and change the value of lsquoDefaultrsquo from NO_REALM to lsquotruersquo

1-10

8 Further under the lsquoOperationsrsquo tab click lsquosetRealmNamersquo

9 The following screen is displayed

10 Specify the value of the parameter as lsquoflexcubersquo and click lsquoInvokersquo button

11 Refresh the lsquoMBeanrsquo browser Go to flexcube gt WorkflowIdentityConfigConfigurationTypeProviderType gt oraclesoamanagementconfigidentityProviderType Under the lsquoAttributesrsquo tab you need to make sure that the values of the following attributes are as per the table below

Attribute Value

Name JpsProvider1

1-11

PropertyType JPS

Service Identity

12 Under lsquoOperationsrsquo tab select the operation lsquoCreatePropertyrsquo and click lsquoInvokersquo button A new

Property is created under lsquoJpsProvider1rsquo

1-12

13 Select the new property and change its Name and Value

14 You can use the options lsquosetNamersquo and lsquosetValuersquo to update the name and value Change the name and value as per the following table

Name Value

jpsContextName flex

The value lsquoflexrsquo should match the value given for lsquojpsContextrsquo during JPS configuration

15 From the lsquoSystem MBean Browserrsquo select lsquojazncomrsquo

16 Under lsquoAttributesrsquo tab change the value of the attribute lsquoDefaultrsquo to lsquofalsersquo

1-13

17 Now restart the Weblogic and SOA servers After restarting the servers make sure the structure is as follows

124 Configuring Application Users and Policies To configure application policies refer the attached sample system-jazn-dataxml

system-jazn-dataxml

1 There are four ltapplicationgt in the ltapplicationsgt namely b2bui OracleBPMProcessRolesApp soa-infra and OracleBPMComposerRolesApp

2 Navigate to ltORACLE_HOMEgt user_projectsdomainsbase_domainconfigfmwconfig

3 Check system-jazn-dataxml available in this location whether ltapplicationgt is already available in the ltapplicationsgt

4 If the application is not available then paste the application content from the attached file inside the ltapplicationsgtltapplicationsgt

5 If the above mentioned ltapplicationgt is already there then replace the application content with the one available in the attached file

1-14

125 Configuring CIS

You need to configure the CIS details Follow the steps given below

1 Along with the Oracle FLEXCUBE UBS EAR file the Installer creates lsquoFCBPELCISjarrsquo file

2 Create a folder by name lsquoclassesrsquo at the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xrsquo

3 Extract the file lsquoFCBPELCISjarrsquo and copy the content of the folder lsquocomrsquo to lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassesrsquo

4 Now navigate to the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassescomofssfccbpelrsquo and delete the folders lsquodaorsquo and lsquosecurityrsquo

5 Navigate to the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassescomofssfccbpelcacrsquo Edit the properties file lsquoCISPropertiespropertiesrsquo and update lsquoJNDInamersquo with the JNDI name defined in the properties file lsquofcubspropertiesrsquo

6 Delete the folders CAC and soaext contents from the comofssfccbpel in FCBPELCISjar file location

7 Copy lsquoFCBPELCISjarrsquo to lsquoltMIDDLEWARE_HOMEgtuser_projectsdomainsltdomain_namegtlib

8 Once the above steps are completed restart the server

126 Configuring DBAdapter

In order to configure DBAdapter follow the steps given below

1 Log in to lsquoWeblogic Consolersquo and click lsquoDeploymentrsquo under lsquoDomain Structurersquo

1-15

2 In the Deployments table select lsquoDbAdapterrsquo You will be navigated to lsquoSettings for

DbAdapterrsquo

3 Click lsquoConfigurationrsquo tab and select lsquoOutbound Connection Poolsrsquo under it

4 Under lsquoGroups and Instancesrsquo click and expand lsquojavaxresourcecciConnectionFactoryrsquo

5 Click lsquoNewrsquo and select lsquojavaxresourcecciConnectionFactory in Outbound Connection Group

6 Define lsquoJNDI Namersquo as lsquoeisDBFCCDEVrsquo and click on lsquoFinishrsquo

1-16

The lsquojndi namersquo should be the same as the one in lsquoDbutility sub-processrsquo

7 Click lsquoDbAdapterrsquo again The new JNDI name is listed

8 Click on the hyperlink lsquoeisDBFCCDEVrsquo

9 Click the lsquoProperty Valuersquo field for the lsquoDataSourceNamersquo and update the application JNDI

reference (given in lsquofcubspropertiesrsquo file) and then press lsquoEnterrsquo key

10 Save and restart the Adminserver

127 Configuring JMS Adapter

Login in to console Click on JMS ServersNew

1-17

1-18

11 Please provide the below Name for JMS Server and select the file persistent store as belowNext

1-19

12 Select the target as SOA Server Finish

1-20

1-21

4 Go back to Console JMS ModulesNew

1-22

1-23

5 Create a JMS Module with the below NameNextSelect the target as SOA ServerFinish

1-24

1-25

1-26

6 Go back to JMS ModulesFCUBSJMSModuleNew

1-27

7 Click on Connection Factory nextCreate the connection Factory with the below NamesNext

1-28

1-29

8 Select Advanced targetingcreate New Sub Deployment with the below NameSelect the target as JMS server which we have created on topFinish

1-30

1-31

1-32

1-33

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 4: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-3

6 Click on Providers tab and click on new button to create new authentication provider 7 Give Provider name as FCJCustomProvider and type as FCUBSUserAuthenticator

8 Click Reorder to bring provider to first of all providers and click OK

1-4

9 Click on FCJCustomProvider 10 In Common tab change the control flag to ldquoSUFFICIENTrdquo

1-5

11 In Provider Specific tab

a) Set JNDIName as Flexcube JNDI Name b) If external authentications used in FCUBS then Fill the LdapMSAD related fields

12 For manually editing the configxml go to

ltORACLE_HOMEgtMiddlewareuser_projectsdomainsbase_domainconfig path Open configxml file The following codes need to be added at proper locations in the configxml a) Search for lt realmgt tag and add the following code between ltrealmgt and lt realmgt tagsThis should be the first child of the realm Node

ltsecauthentication-provider xmlnsn1=httpfcubsofsscomsecurity xsitype=n1fcubs-user-authenticatorTypegt

ltsecnamegtFCJCustomProviderltsecnamegt ltseccontrol-flaggtSUFFICIENTltseccontrol-flaggt ltn1msad-or-ldap-login-requiredgttrueltn1msad-or-ldap-login-requiredgt ltn1external-password-requiredgttrueltn1external-password-requiredgt ltn1authentication-typegtMSADltn1authentication-typegt

1-6

ltn1ldap-server-ip-and-portgtLDAPlocalhost389ltn1ldap-server-ip-and-portgt ltn1ldap-ssl-enabledgttrueltn1ldap-ssl-enabledgt ltn1security-authentication-typegtsimpleltn1security-authentication-typegt ltn1ldap-domain-namegtOFSSCOMltn1ldap-domain-namegt ltn1ldap-server-time-out-durationgt0ltn1ldap-server-time-out-durationgt

ltsecauthentication-providergt b) Make sure tag values matches the value given during Property file creation

122 Configuring JPS

For configuring JPS you need to follow the steps given below

1 Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

ltserviceProvider class=comofssfccbpelsecurityjpsserviceFCIdentityServiceProvider name=idstoredbprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt

ltserviceProvidergt

Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

ltserviceInstance provider=idstoredbprovider name=idstoredbgt

ltproperty value=flexcube name=subscribernamegt

ltproperty value=jdbcfcjdevDS name=datasourcegt

ltserviceInstancegt

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

2 Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

ltjpsContext name=flexgt

ltserviceInstanceRef ref=credstoredbgt

ltserviceInstanceRef ref=keystoredbgt

ltserviceInstanceRef ref=policystorexmlgt

1-7

ltserviceInstanceRef ref=auditdbgt

ltserviceInstanceRef ref=idstoredbgt

ltjpsContextgt

123 Configuring Work Flow Identity

You need to configure the workflow identity details from Enterprise Manager Console of the SOA To configure workflow identity details follow the steps given below

1 Login to EM Console Expand the SOA

2 Right click lsquosoa-infra(soa-server1)rsquo choose lsquoAdministrationrsquo and click lsquoSystem MBean Browserrsquo under it

1-8

3 Further under System MBean Browser go to lsquooracleassoainfraconfig gt Server soa_server1 gt WorkflowIdentityConfig gt human-workflowrsquo

4 Under the lsquoOperationsrsquo tab choose lsquocreateConfigurationrsquo option The following screen is displayed

5 Click lsquoInvokersquo button

1-9

The SOA displays the following confirmation message

Confirmation

Operation executed successfully

6 Refresh lsquoMBeanrsquo browser Go to lsquoWorkflowIdentityConfigConfigurationTypersquo under lsquohuman-workflowrsquo

7 Click lsquoNO_REALMrsquo On the right side select lsquoAttributesrsquo tab and change the value of lsquoDefaultrsquo from NO_REALM to lsquotruersquo

1-10

8 Further under the lsquoOperationsrsquo tab click lsquosetRealmNamersquo

9 The following screen is displayed

10 Specify the value of the parameter as lsquoflexcubersquo and click lsquoInvokersquo button

11 Refresh the lsquoMBeanrsquo browser Go to flexcube gt WorkflowIdentityConfigConfigurationTypeProviderType gt oraclesoamanagementconfigidentityProviderType Under the lsquoAttributesrsquo tab you need to make sure that the values of the following attributes are as per the table below

Attribute Value

Name JpsProvider1

1-11

PropertyType JPS

Service Identity

12 Under lsquoOperationsrsquo tab select the operation lsquoCreatePropertyrsquo and click lsquoInvokersquo button A new

Property is created under lsquoJpsProvider1rsquo

1-12

13 Select the new property and change its Name and Value

14 You can use the options lsquosetNamersquo and lsquosetValuersquo to update the name and value Change the name and value as per the following table

Name Value

jpsContextName flex

The value lsquoflexrsquo should match the value given for lsquojpsContextrsquo during JPS configuration

15 From the lsquoSystem MBean Browserrsquo select lsquojazncomrsquo

16 Under lsquoAttributesrsquo tab change the value of the attribute lsquoDefaultrsquo to lsquofalsersquo

1-13

17 Now restart the Weblogic and SOA servers After restarting the servers make sure the structure is as follows

124 Configuring Application Users and Policies To configure application policies refer the attached sample system-jazn-dataxml

system-jazn-dataxml

1 There are four ltapplicationgt in the ltapplicationsgt namely b2bui OracleBPMProcessRolesApp soa-infra and OracleBPMComposerRolesApp

2 Navigate to ltORACLE_HOMEgt user_projectsdomainsbase_domainconfigfmwconfig

3 Check system-jazn-dataxml available in this location whether ltapplicationgt is already available in the ltapplicationsgt

4 If the application is not available then paste the application content from the attached file inside the ltapplicationsgtltapplicationsgt

5 If the above mentioned ltapplicationgt is already there then replace the application content with the one available in the attached file

1-14

125 Configuring CIS

You need to configure the CIS details Follow the steps given below

1 Along with the Oracle FLEXCUBE UBS EAR file the Installer creates lsquoFCBPELCISjarrsquo file

2 Create a folder by name lsquoclassesrsquo at the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xrsquo

3 Extract the file lsquoFCBPELCISjarrsquo and copy the content of the folder lsquocomrsquo to lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassesrsquo

4 Now navigate to the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassescomofssfccbpelrsquo and delete the folders lsquodaorsquo and lsquosecurityrsquo

5 Navigate to the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassescomofssfccbpelcacrsquo Edit the properties file lsquoCISPropertiespropertiesrsquo and update lsquoJNDInamersquo with the JNDI name defined in the properties file lsquofcubspropertiesrsquo

6 Delete the folders CAC and soaext contents from the comofssfccbpel in FCBPELCISjar file location

7 Copy lsquoFCBPELCISjarrsquo to lsquoltMIDDLEWARE_HOMEgtuser_projectsdomainsltdomain_namegtlib

8 Once the above steps are completed restart the server

126 Configuring DBAdapter

In order to configure DBAdapter follow the steps given below

1 Log in to lsquoWeblogic Consolersquo and click lsquoDeploymentrsquo under lsquoDomain Structurersquo

1-15

2 In the Deployments table select lsquoDbAdapterrsquo You will be navigated to lsquoSettings for

DbAdapterrsquo

3 Click lsquoConfigurationrsquo tab and select lsquoOutbound Connection Poolsrsquo under it

4 Under lsquoGroups and Instancesrsquo click and expand lsquojavaxresourcecciConnectionFactoryrsquo

5 Click lsquoNewrsquo and select lsquojavaxresourcecciConnectionFactory in Outbound Connection Group

6 Define lsquoJNDI Namersquo as lsquoeisDBFCCDEVrsquo and click on lsquoFinishrsquo

1-16

The lsquojndi namersquo should be the same as the one in lsquoDbutility sub-processrsquo

7 Click lsquoDbAdapterrsquo again The new JNDI name is listed

8 Click on the hyperlink lsquoeisDBFCCDEVrsquo

9 Click the lsquoProperty Valuersquo field for the lsquoDataSourceNamersquo and update the application JNDI

reference (given in lsquofcubspropertiesrsquo file) and then press lsquoEnterrsquo key

10 Save and restart the Adminserver

127 Configuring JMS Adapter

Login in to console Click on JMS ServersNew

1-17

1-18

11 Please provide the below Name for JMS Server and select the file persistent store as belowNext

1-19

12 Select the target as SOA Server Finish

1-20

1-21

4 Go back to Console JMS ModulesNew

1-22

1-23

5 Create a JMS Module with the below NameNextSelect the target as SOA ServerFinish

1-24

1-25

1-26

6 Go back to JMS ModulesFCUBSJMSModuleNew

1-27

7 Click on Connection Factory nextCreate the connection Factory with the below NamesNext

1-28

1-29

8 Select Advanced targetingcreate New Sub Deployment with the below NameSelect the target as JMS server which we have created on topFinish

1-30

1-31

1-32

1-33

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 5: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-4

9 Click on FCJCustomProvider 10 In Common tab change the control flag to ldquoSUFFICIENTrdquo

1-5

11 In Provider Specific tab

a) Set JNDIName as Flexcube JNDI Name b) If external authentications used in FCUBS then Fill the LdapMSAD related fields

12 For manually editing the configxml go to

ltORACLE_HOMEgtMiddlewareuser_projectsdomainsbase_domainconfig path Open configxml file The following codes need to be added at proper locations in the configxml a) Search for lt realmgt tag and add the following code between ltrealmgt and lt realmgt tagsThis should be the first child of the realm Node

ltsecauthentication-provider xmlnsn1=httpfcubsofsscomsecurity xsitype=n1fcubs-user-authenticatorTypegt

ltsecnamegtFCJCustomProviderltsecnamegt ltseccontrol-flaggtSUFFICIENTltseccontrol-flaggt ltn1msad-or-ldap-login-requiredgttrueltn1msad-or-ldap-login-requiredgt ltn1external-password-requiredgttrueltn1external-password-requiredgt ltn1authentication-typegtMSADltn1authentication-typegt

1-6

ltn1ldap-server-ip-and-portgtLDAPlocalhost389ltn1ldap-server-ip-and-portgt ltn1ldap-ssl-enabledgttrueltn1ldap-ssl-enabledgt ltn1security-authentication-typegtsimpleltn1security-authentication-typegt ltn1ldap-domain-namegtOFSSCOMltn1ldap-domain-namegt ltn1ldap-server-time-out-durationgt0ltn1ldap-server-time-out-durationgt

ltsecauthentication-providergt b) Make sure tag values matches the value given during Property file creation

122 Configuring JPS

For configuring JPS you need to follow the steps given below

1 Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

ltserviceProvider class=comofssfccbpelsecurityjpsserviceFCIdentityServiceProvider name=idstoredbprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt

ltserviceProvidergt

Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

ltserviceInstance provider=idstoredbprovider name=idstoredbgt

ltproperty value=flexcube name=subscribernamegt

ltproperty value=jdbcfcjdevDS name=datasourcegt

ltserviceInstancegt

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

2 Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

ltjpsContext name=flexgt

ltserviceInstanceRef ref=credstoredbgt

ltserviceInstanceRef ref=keystoredbgt

ltserviceInstanceRef ref=policystorexmlgt

1-7

ltserviceInstanceRef ref=auditdbgt

ltserviceInstanceRef ref=idstoredbgt

ltjpsContextgt

123 Configuring Work Flow Identity

You need to configure the workflow identity details from Enterprise Manager Console of the SOA To configure workflow identity details follow the steps given below

1 Login to EM Console Expand the SOA

2 Right click lsquosoa-infra(soa-server1)rsquo choose lsquoAdministrationrsquo and click lsquoSystem MBean Browserrsquo under it

1-8

3 Further under System MBean Browser go to lsquooracleassoainfraconfig gt Server soa_server1 gt WorkflowIdentityConfig gt human-workflowrsquo

4 Under the lsquoOperationsrsquo tab choose lsquocreateConfigurationrsquo option The following screen is displayed

5 Click lsquoInvokersquo button

1-9

The SOA displays the following confirmation message

Confirmation

Operation executed successfully

6 Refresh lsquoMBeanrsquo browser Go to lsquoWorkflowIdentityConfigConfigurationTypersquo under lsquohuman-workflowrsquo

7 Click lsquoNO_REALMrsquo On the right side select lsquoAttributesrsquo tab and change the value of lsquoDefaultrsquo from NO_REALM to lsquotruersquo

1-10

8 Further under the lsquoOperationsrsquo tab click lsquosetRealmNamersquo

9 The following screen is displayed

10 Specify the value of the parameter as lsquoflexcubersquo and click lsquoInvokersquo button

11 Refresh the lsquoMBeanrsquo browser Go to flexcube gt WorkflowIdentityConfigConfigurationTypeProviderType gt oraclesoamanagementconfigidentityProviderType Under the lsquoAttributesrsquo tab you need to make sure that the values of the following attributes are as per the table below

Attribute Value

Name JpsProvider1

1-11

PropertyType JPS

Service Identity

12 Under lsquoOperationsrsquo tab select the operation lsquoCreatePropertyrsquo and click lsquoInvokersquo button A new

Property is created under lsquoJpsProvider1rsquo

1-12

13 Select the new property and change its Name and Value

14 You can use the options lsquosetNamersquo and lsquosetValuersquo to update the name and value Change the name and value as per the following table

Name Value

jpsContextName flex

The value lsquoflexrsquo should match the value given for lsquojpsContextrsquo during JPS configuration

15 From the lsquoSystem MBean Browserrsquo select lsquojazncomrsquo

16 Under lsquoAttributesrsquo tab change the value of the attribute lsquoDefaultrsquo to lsquofalsersquo

1-13

17 Now restart the Weblogic and SOA servers After restarting the servers make sure the structure is as follows

124 Configuring Application Users and Policies To configure application policies refer the attached sample system-jazn-dataxml

system-jazn-dataxml

1 There are four ltapplicationgt in the ltapplicationsgt namely b2bui OracleBPMProcessRolesApp soa-infra and OracleBPMComposerRolesApp

2 Navigate to ltORACLE_HOMEgt user_projectsdomainsbase_domainconfigfmwconfig

3 Check system-jazn-dataxml available in this location whether ltapplicationgt is already available in the ltapplicationsgt

4 If the application is not available then paste the application content from the attached file inside the ltapplicationsgtltapplicationsgt

5 If the above mentioned ltapplicationgt is already there then replace the application content with the one available in the attached file

1-14

125 Configuring CIS

You need to configure the CIS details Follow the steps given below

1 Along with the Oracle FLEXCUBE UBS EAR file the Installer creates lsquoFCBPELCISjarrsquo file

2 Create a folder by name lsquoclassesrsquo at the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xrsquo

3 Extract the file lsquoFCBPELCISjarrsquo and copy the content of the folder lsquocomrsquo to lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassesrsquo

4 Now navigate to the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassescomofssfccbpelrsquo and delete the folders lsquodaorsquo and lsquosecurityrsquo

5 Navigate to the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassescomofssfccbpelcacrsquo Edit the properties file lsquoCISPropertiespropertiesrsquo and update lsquoJNDInamersquo with the JNDI name defined in the properties file lsquofcubspropertiesrsquo

6 Delete the folders CAC and soaext contents from the comofssfccbpel in FCBPELCISjar file location

7 Copy lsquoFCBPELCISjarrsquo to lsquoltMIDDLEWARE_HOMEgtuser_projectsdomainsltdomain_namegtlib

8 Once the above steps are completed restart the server

126 Configuring DBAdapter

In order to configure DBAdapter follow the steps given below

1 Log in to lsquoWeblogic Consolersquo and click lsquoDeploymentrsquo under lsquoDomain Structurersquo

1-15

2 In the Deployments table select lsquoDbAdapterrsquo You will be navigated to lsquoSettings for

DbAdapterrsquo

3 Click lsquoConfigurationrsquo tab and select lsquoOutbound Connection Poolsrsquo under it

4 Under lsquoGroups and Instancesrsquo click and expand lsquojavaxresourcecciConnectionFactoryrsquo

5 Click lsquoNewrsquo and select lsquojavaxresourcecciConnectionFactory in Outbound Connection Group

6 Define lsquoJNDI Namersquo as lsquoeisDBFCCDEVrsquo and click on lsquoFinishrsquo

1-16

The lsquojndi namersquo should be the same as the one in lsquoDbutility sub-processrsquo

7 Click lsquoDbAdapterrsquo again The new JNDI name is listed

8 Click on the hyperlink lsquoeisDBFCCDEVrsquo

9 Click the lsquoProperty Valuersquo field for the lsquoDataSourceNamersquo and update the application JNDI

reference (given in lsquofcubspropertiesrsquo file) and then press lsquoEnterrsquo key

10 Save and restart the Adminserver

127 Configuring JMS Adapter

Login in to console Click on JMS ServersNew

1-17

1-18

11 Please provide the below Name for JMS Server and select the file persistent store as belowNext

1-19

12 Select the target as SOA Server Finish

1-20

1-21

4 Go back to Console JMS ModulesNew

1-22

1-23

5 Create a JMS Module with the below NameNextSelect the target as SOA ServerFinish

1-24

1-25

1-26

6 Go back to JMS ModulesFCUBSJMSModuleNew

1-27

7 Click on Connection Factory nextCreate the connection Factory with the below NamesNext

1-28

1-29

8 Select Advanced targetingcreate New Sub Deployment with the below NameSelect the target as JMS server which we have created on topFinish

1-30

1-31

1-32

1-33

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 6: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-5

11 In Provider Specific tab

a) Set JNDIName as Flexcube JNDI Name b) If external authentications used in FCUBS then Fill the LdapMSAD related fields

12 For manually editing the configxml go to

ltORACLE_HOMEgtMiddlewareuser_projectsdomainsbase_domainconfig path Open configxml file The following codes need to be added at proper locations in the configxml a) Search for lt realmgt tag and add the following code between ltrealmgt and lt realmgt tagsThis should be the first child of the realm Node

ltsecauthentication-provider xmlnsn1=httpfcubsofsscomsecurity xsitype=n1fcubs-user-authenticatorTypegt

ltsecnamegtFCJCustomProviderltsecnamegt ltseccontrol-flaggtSUFFICIENTltseccontrol-flaggt ltn1msad-or-ldap-login-requiredgttrueltn1msad-or-ldap-login-requiredgt ltn1external-password-requiredgttrueltn1external-password-requiredgt ltn1authentication-typegtMSADltn1authentication-typegt

1-6

ltn1ldap-server-ip-and-portgtLDAPlocalhost389ltn1ldap-server-ip-and-portgt ltn1ldap-ssl-enabledgttrueltn1ldap-ssl-enabledgt ltn1security-authentication-typegtsimpleltn1security-authentication-typegt ltn1ldap-domain-namegtOFSSCOMltn1ldap-domain-namegt ltn1ldap-server-time-out-durationgt0ltn1ldap-server-time-out-durationgt

ltsecauthentication-providergt b) Make sure tag values matches the value given during Property file creation

122 Configuring JPS

For configuring JPS you need to follow the steps given below

1 Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

ltserviceProvider class=comofssfccbpelsecurityjpsserviceFCIdentityServiceProvider name=idstoredbprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt

ltserviceProvidergt

Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

ltserviceInstance provider=idstoredbprovider name=idstoredbgt

ltproperty value=flexcube name=subscribernamegt

ltproperty value=jdbcfcjdevDS name=datasourcegt

ltserviceInstancegt

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

2 Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

ltjpsContext name=flexgt

ltserviceInstanceRef ref=credstoredbgt

ltserviceInstanceRef ref=keystoredbgt

ltserviceInstanceRef ref=policystorexmlgt

1-7

ltserviceInstanceRef ref=auditdbgt

ltserviceInstanceRef ref=idstoredbgt

ltjpsContextgt

123 Configuring Work Flow Identity

You need to configure the workflow identity details from Enterprise Manager Console of the SOA To configure workflow identity details follow the steps given below

1 Login to EM Console Expand the SOA

2 Right click lsquosoa-infra(soa-server1)rsquo choose lsquoAdministrationrsquo and click lsquoSystem MBean Browserrsquo under it

1-8

3 Further under System MBean Browser go to lsquooracleassoainfraconfig gt Server soa_server1 gt WorkflowIdentityConfig gt human-workflowrsquo

4 Under the lsquoOperationsrsquo tab choose lsquocreateConfigurationrsquo option The following screen is displayed

5 Click lsquoInvokersquo button

1-9

The SOA displays the following confirmation message

Confirmation

Operation executed successfully

6 Refresh lsquoMBeanrsquo browser Go to lsquoWorkflowIdentityConfigConfigurationTypersquo under lsquohuman-workflowrsquo

7 Click lsquoNO_REALMrsquo On the right side select lsquoAttributesrsquo tab and change the value of lsquoDefaultrsquo from NO_REALM to lsquotruersquo

1-10

8 Further under the lsquoOperationsrsquo tab click lsquosetRealmNamersquo

9 The following screen is displayed

10 Specify the value of the parameter as lsquoflexcubersquo and click lsquoInvokersquo button

11 Refresh the lsquoMBeanrsquo browser Go to flexcube gt WorkflowIdentityConfigConfigurationTypeProviderType gt oraclesoamanagementconfigidentityProviderType Under the lsquoAttributesrsquo tab you need to make sure that the values of the following attributes are as per the table below

Attribute Value

Name JpsProvider1

1-11

PropertyType JPS

Service Identity

12 Under lsquoOperationsrsquo tab select the operation lsquoCreatePropertyrsquo and click lsquoInvokersquo button A new

Property is created under lsquoJpsProvider1rsquo

1-12

13 Select the new property and change its Name and Value

14 You can use the options lsquosetNamersquo and lsquosetValuersquo to update the name and value Change the name and value as per the following table

Name Value

jpsContextName flex

The value lsquoflexrsquo should match the value given for lsquojpsContextrsquo during JPS configuration

15 From the lsquoSystem MBean Browserrsquo select lsquojazncomrsquo

16 Under lsquoAttributesrsquo tab change the value of the attribute lsquoDefaultrsquo to lsquofalsersquo

1-13

17 Now restart the Weblogic and SOA servers After restarting the servers make sure the structure is as follows

124 Configuring Application Users and Policies To configure application policies refer the attached sample system-jazn-dataxml

system-jazn-dataxml

1 There are four ltapplicationgt in the ltapplicationsgt namely b2bui OracleBPMProcessRolesApp soa-infra and OracleBPMComposerRolesApp

2 Navigate to ltORACLE_HOMEgt user_projectsdomainsbase_domainconfigfmwconfig

3 Check system-jazn-dataxml available in this location whether ltapplicationgt is already available in the ltapplicationsgt

4 If the application is not available then paste the application content from the attached file inside the ltapplicationsgtltapplicationsgt

5 If the above mentioned ltapplicationgt is already there then replace the application content with the one available in the attached file

1-14

125 Configuring CIS

You need to configure the CIS details Follow the steps given below

1 Along with the Oracle FLEXCUBE UBS EAR file the Installer creates lsquoFCBPELCISjarrsquo file

2 Create a folder by name lsquoclassesrsquo at the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xrsquo

3 Extract the file lsquoFCBPELCISjarrsquo and copy the content of the folder lsquocomrsquo to lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassesrsquo

4 Now navigate to the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassescomofssfccbpelrsquo and delete the folders lsquodaorsquo and lsquosecurityrsquo

5 Navigate to the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassescomofssfccbpelcacrsquo Edit the properties file lsquoCISPropertiespropertiesrsquo and update lsquoJNDInamersquo with the JNDI name defined in the properties file lsquofcubspropertiesrsquo

6 Delete the folders CAC and soaext contents from the comofssfccbpel in FCBPELCISjar file location

7 Copy lsquoFCBPELCISjarrsquo to lsquoltMIDDLEWARE_HOMEgtuser_projectsdomainsltdomain_namegtlib

8 Once the above steps are completed restart the server

126 Configuring DBAdapter

In order to configure DBAdapter follow the steps given below

1 Log in to lsquoWeblogic Consolersquo and click lsquoDeploymentrsquo under lsquoDomain Structurersquo

1-15

2 In the Deployments table select lsquoDbAdapterrsquo You will be navigated to lsquoSettings for

DbAdapterrsquo

3 Click lsquoConfigurationrsquo tab and select lsquoOutbound Connection Poolsrsquo under it

4 Under lsquoGroups and Instancesrsquo click and expand lsquojavaxresourcecciConnectionFactoryrsquo

5 Click lsquoNewrsquo and select lsquojavaxresourcecciConnectionFactory in Outbound Connection Group

6 Define lsquoJNDI Namersquo as lsquoeisDBFCCDEVrsquo and click on lsquoFinishrsquo

1-16

The lsquojndi namersquo should be the same as the one in lsquoDbutility sub-processrsquo

7 Click lsquoDbAdapterrsquo again The new JNDI name is listed

8 Click on the hyperlink lsquoeisDBFCCDEVrsquo

9 Click the lsquoProperty Valuersquo field for the lsquoDataSourceNamersquo and update the application JNDI

reference (given in lsquofcubspropertiesrsquo file) and then press lsquoEnterrsquo key

10 Save and restart the Adminserver

127 Configuring JMS Adapter

Login in to console Click on JMS ServersNew

1-17

1-18

11 Please provide the below Name for JMS Server and select the file persistent store as belowNext

1-19

12 Select the target as SOA Server Finish

1-20

1-21

4 Go back to Console JMS ModulesNew

1-22

1-23

5 Create a JMS Module with the below NameNextSelect the target as SOA ServerFinish

1-24

1-25

1-26

6 Go back to JMS ModulesFCUBSJMSModuleNew

1-27

7 Click on Connection Factory nextCreate the connection Factory with the below NamesNext

1-28

1-29

8 Select Advanced targetingcreate New Sub Deployment with the below NameSelect the target as JMS server which we have created on topFinish

1-30

1-31

1-32

1-33

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 7: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-6

ltn1ldap-server-ip-and-portgtLDAPlocalhost389ltn1ldap-server-ip-and-portgt ltn1ldap-ssl-enabledgttrueltn1ldap-ssl-enabledgt ltn1security-authentication-typegtsimpleltn1security-authentication-typegt ltn1ldap-domain-namegtOFSSCOMltn1ldap-domain-namegt ltn1ldap-server-time-out-durationgt0ltn1ldap-server-time-out-durationgt

ltsecauthentication-providergt b) Make sure tag values matches the value given during Property file creation

122 Configuring JPS

For configuring JPS you need to follow the steps given below

1 Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

ltserviceProvider class=comofssfccbpelsecurityjpsserviceFCIdentityServiceProvider name=idstoredbprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt

ltserviceProvidergt

Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

ltserviceInstance provider=idstoredbprovider name=idstoredbgt

ltproperty value=flexcube name=subscribernamegt

ltproperty value=jdbcfcjdevDS name=datasourcegt

ltserviceInstancegt

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

2 Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

ltjpsContext name=flexgt

ltserviceInstanceRef ref=credstoredbgt

ltserviceInstanceRef ref=keystoredbgt

ltserviceInstanceRef ref=policystorexmlgt

1-7

ltserviceInstanceRef ref=auditdbgt

ltserviceInstanceRef ref=idstoredbgt

ltjpsContextgt

123 Configuring Work Flow Identity

You need to configure the workflow identity details from Enterprise Manager Console of the SOA To configure workflow identity details follow the steps given below

1 Login to EM Console Expand the SOA

2 Right click lsquosoa-infra(soa-server1)rsquo choose lsquoAdministrationrsquo and click lsquoSystem MBean Browserrsquo under it

1-8

3 Further under System MBean Browser go to lsquooracleassoainfraconfig gt Server soa_server1 gt WorkflowIdentityConfig gt human-workflowrsquo

4 Under the lsquoOperationsrsquo tab choose lsquocreateConfigurationrsquo option The following screen is displayed

5 Click lsquoInvokersquo button

1-9

The SOA displays the following confirmation message

Confirmation

Operation executed successfully

6 Refresh lsquoMBeanrsquo browser Go to lsquoWorkflowIdentityConfigConfigurationTypersquo under lsquohuman-workflowrsquo

7 Click lsquoNO_REALMrsquo On the right side select lsquoAttributesrsquo tab and change the value of lsquoDefaultrsquo from NO_REALM to lsquotruersquo

1-10

8 Further under the lsquoOperationsrsquo tab click lsquosetRealmNamersquo

9 The following screen is displayed

10 Specify the value of the parameter as lsquoflexcubersquo and click lsquoInvokersquo button

11 Refresh the lsquoMBeanrsquo browser Go to flexcube gt WorkflowIdentityConfigConfigurationTypeProviderType gt oraclesoamanagementconfigidentityProviderType Under the lsquoAttributesrsquo tab you need to make sure that the values of the following attributes are as per the table below

Attribute Value

Name JpsProvider1

1-11

PropertyType JPS

Service Identity

12 Under lsquoOperationsrsquo tab select the operation lsquoCreatePropertyrsquo and click lsquoInvokersquo button A new

Property is created under lsquoJpsProvider1rsquo

1-12

13 Select the new property and change its Name and Value

14 You can use the options lsquosetNamersquo and lsquosetValuersquo to update the name and value Change the name and value as per the following table

Name Value

jpsContextName flex

The value lsquoflexrsquo should match the value given for lsquojpsContextrsquo during JPS configuration

15 From the lsquoSystem MBean Browserrsquo select lsquojazncomrsquo

16 Under lsquoAttributesrsquo tab change the value of the attribute lsquoDefaultrsquo to lsquofalsersquo

1-13

17 Now restart the Weblogic and SOA servers After restarting the servers make sure the structure is as follows

124 Configuring Application Users and Policies To configure application policies refer the attached sample system-jazn-dataxml

system-jazn-dataxml

1 There are four ltapplicationgt in the ltapplicationsgt namely b2bui OracleBPMProcessRolesApp soa-infra and OracleBPMComposerRolesApp

2 Navigate to ltORACLE_HOMEgt user_projectsdomainsbase_domainconfigfmwconfig

3 Check system-jazn-dataxml available in this location whether ltapplicationgt is already available in the ltapplicationsgt

4 If the application is not available then paste the application content from the attached file inside the ltapplicationsgtltapplicationsgt

5 If the above mentioned ltapplicationgt is already there then replace the application content with the one available in the attached file

1-14

125 Configuring CIS

You need to configure the CIS details Follow the steps given below

1 Along with the Oracle FLEXCUBE UBS EAR file the Installer creates lsquoFCBPELCISjarrsquo file

2 Create a folder by name lsquoclassesrsquo at the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xrsquo

3 Extract the file lsquoFCBPELCISjarrsquo and copy the content of the folder lsquocomrsquo to lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassesrsquo

4 Now navigate to the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassescomofssfccbpelrsquo and delete the folders lsquodaorsquo and lsquosecurityrsquo

5 Navigate to the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassescomofssfccbpelcacrsquo Edit the properties file lsquoCISPropertiespropertiesrsquo and update lsquoJNDInamersquo with the JNDI name defined in the properties file lsquofcubspropertiesrsquo

6 Delete the folders CAC and soaext contents from the comofssfccbpel in FCBPELCISjar file location

7 Copy lsquoFCBPELCISjarrsquo to lsquoltMIDDLEWARE_HOMEgtuser_projectsdomainsltdomain_namegtlib

8 Once the above steps are completed restart the server

126 Configuring DBAdapter

In order to configure DBAdapter follow the steps given below

1 Log in to lsquoWeblogic Consolersquo and click lsquoDeploymentrsquo under lsquoDomain Structurersquo

1-15

2 In the Deployments table select lsquoDbAdapterrsquo You will be navigated to lsquoSettings for

DbAdapterrsquo

3 Click lsquoConfigurationrsquo tab and select lsquoOutbound Connection Poolsrsquo under it

4 Under lsquoGroups and Instancesrsquo click and expand lsquojavaxresourcecciConnectionFactoryrsquo

5 Click lsquoNewrsquo and select lsquojavaxresourcecciConnectionFactory in Outbound Connection Group

6 Define lsquoJNDI Namersquo as lsquoeisDBFCCDEVrsquo and click on lsquoFinishrsquo

1-16

The lsquojndi namersquo should be the same as the one in lsquoDbutility sub-processrsquo

7 Click lsquoDbAdapterrsquo again The new JNDI name is listed

8 Click on the hyperlink lsquoeisDBFCCDEVrsquo

9 Click the lsquoProperty Valuersquo field for the lsquoDataSourceNamersquo and update the application JNDI

reference (given in lsquofcubspropertiesrsquo file) and then press lsquoEnterrsquo key

10 Save and restart the Adminserver

127 Configuring JMS Adapter

Login in to console Click on JMS ServersNew

1-17

1-18

11 Please provide the below Name for JMS Server and select the file persistent store as belowNext

1-19

12 Select the target as SOA Server Finish

1-20

1-21

4 Go back to Console JMS ModulesNew

1-22

1-23

5 Create a JMS Module with the below NameNextSelect the target as SOA ServerFinish

1-24

1-25

1-26

6 Go back to JMS ModulesFCUBSJMSModuleNew

1-27

7 Click on Connection Factory nextCreate the connection Factory with the below NamesNext

1-28

1-29

8 Select Advanced targetingcreate New Sub Deployment with the below NameSelect the target as JMS server which we have created on topFinish

1-30

1-31

1-32

1-33

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 8: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-7

ltserviceInstanceRef ref=auditdbgt

ltserviceInstanceRef ref=idstoredbgt

ltjpsContextgt

123 Configuring Work Flow Identity

You need to configure the workflow identity details from Enterprise Manager Console of the SOA To configure workflow identity details follow the steps given below

1 Login to EM Console Expand the SOA

2 Right click lsquosoa-infra(soa-server1)rsquo choose lsquoAdministrationrsquo and click lsquoSystem MBean Browserrsquo under it

1-8

3 Further under System MBean Browser go to lsquooracleassoainfraconfig gt Server soa_server1 gt WorkflowIdentityConfig gt human-workflowrsquo

4 Under the lsquoOperationsrsquo tab choose lsquocreateConfigurationrsquo option The following screen is displayed

5 Click lsquoInvokersquo button

1-9

The SOA displays the following confirmation message

Confirmation

Operation executed successfully

6 Refresh lsquoMBeanrsquo browser Go to lsquoWorkflowIdentityConfigConfigurationTypersquo under lsquohuman-workflowrsquo

7 Click lsquoNO_REALMrsquo On the right side select lsquoAttributesrsquo tab and change the value of lsquoDefaultrsquo from NO_REALM to lsquotruersquo

1-10

8 Further under the lsquoOperationsrsquo tab click lsquosetRealmNamersquo

9 The following screen is displayed

10 Specify the value of the parameter as lsquoflexcubersquo and click lsquoInvokersquo button

11 Refresh the lsquoMBeanrsquo browser Go to flexcube gt WorkflowIdentityConfigConfigurationTypeProviderType gt oraclesoamanagementconfigidentityProviderType Under the lsquoAttributesrsquo tab you need to make sure that the values of the following attributes are as per the table below

Attribute Value

Name JpsProvider1

1-11

PropertyType JPS

Service Identity

12 Under lsquoOperationsrsquo tab select the operation lsquoCreatePropertyrsquo and click lsquoInvokersquo button A new

Property is created under lsquoJpsProvider1rsquo

1-12

13 Select the new property and change its Name and Value

14 You can use the options lsquosetNamersquo and lsquosetValuersquo to update the name and value Change the name and value as per the following table

Name Value

jpsContextName flex

The value lsquoflexrsquo should match the value given for lsquojpsContextrsquo during JPS configuration

15 From the lsquoSystem MBean Browserrsquo select lsquojazncomrsquo

16 Under lsquoAttributesrsquo tab change the value of the attribute lsquoDefaultrsquo to lsquofalsersquo

1-13

17 Now restart the Weblogic and SOA servers After restarting the servers make sure the structure is as follows

124 Configuring Application Users and Policies To configure application policies refer the attached sample system-jazn-dataxml

system-jazn-dataxml

1 There are four ltapplicationgt in the ltapplicationsgt namely b2bui OracleBPMProcessRolesApp soa-infra and OracleBPMComposerRolesApp

2 Navigate to ltORACLE_HOMEgt user_projectsdomainsbase_domainconfigfmwconfig

3 Check system-jazn-dataxml available in this location whether ltapplicationgt is already available in the ltapplicationsgt

4 If the application is not available then paste the application content from the attached file inside the ltapplicationsgtltapplicationsgt

5 If the above mentioned ltapplicationgt is already there then replace the application content with the one available in the attached file

1-14

125 Configuring CIS

You need to configure the CIS details Follow the steps given below

1 Along with the Oracle FLEXCUBE UBS EAR file the Installer creates lsquoFCBPELCISjarrsquo file

2 Create a folder by name lsquoclassesrsquo at the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xrsquo

3 Extract the file lsquoFCBPELCISjarrsquo and copy the content of the folder lsquocomrsquo to lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassesrsquo

4 Now navigate to the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassescomofssfccbpelrsquo and delete the folders lsquodaorsquo and lsquosecurityrsquo

5 Navigate to the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassescomofssfccbpelcacrsquo Edit the properties file lsquoCISPropertiespropertiesrsquo and update lsquoJNDInamersquo with the JNDI name defined in the properties file lsquofcubspropertiesrsquo

6 Delete the folders CAC and soaext contents from the comofssfccbpel in FCBPELCISjar file location

7 Copy lsquoFCBPELCISjarrsquo to lsquoltMIDDLEWARE_HOMEgtuser_projectsdomainsltdomain_namegtlib

8 Once the above steps are completed restart the server

126 Configuring DBAdapter

In order to configure DBAdapter follow the steps given below

1 Log in to lsquoWeblogic Consolersquo and click lsquoDeploymentrsquo under lsquoDomain Structurersquo

1-15

2 In the Deployments table select lsquoDbAdapterrsquo You will be navigated to lsquoSettings for

DbAdapterrsquo

3 Click lsquoConfigurationrsquo tab and select lsquoOutbound Connection Poolsrsquo under it

4 Under lsquoGroups and Instancesrsquo click and expand lsquojavaxresourcecciConnectionFactoryrsquo

5 Click lsquoNewrsquo and select lsquojavaxresourcecciConnectionFactory in Outbound Connection Group

6 Define lsquoJNDI Namersquo as lsquoeisDBFCCDEVrsquo and click on lsquoFinishrsquo

1-16

The lsquojndi namersquo should be the same as the one in lsquoDbutility sub-processrsquo

7 Click lsquoDbAdapterrsquo again The new JNDI name is listed

8 Click on the hyperlink lsquoeisDBFCCDEVrsquo

9 Click the lsquoProperty Valuersquo field for the lsquoDataSourceNamersquo and update the application JNDI

reference (given in lsquofcubspropertiesrsquo file) and then press lsquoEnterrsquo key

10 Save and restart the Adminserver

127 Configuring JMS Adapter

Login in to console Click on JMS ServersNew

1-17

1-18

11 Please provide the below Name for JMS Server and select the file persistent store as belowNext

1-19

12 Select the target as SOA Server Finish

1-20

1-21

4 Go back to Console JMS ModulesNew

1-22

1-23

5 Create a JMS Module with the below NameNextSelect the target as SOA ServerFinish

1-24

1-25

1-26

6 Go back to JMS ModulesFCUBSJMSModuleNew

1-27

7 Click on Connection Factory nextCreate the connection Factory with the below NamesNext

1-28

1-29

8 Select Advanced targetingcreate New Sub Deployment with the below NameSelect the target as JMS server which we have created on topFinish

1-30

1-31

1-32

1-33

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 9: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-8

3 Further under System MBean Browser go to lsquooracleassoainfraconfig gt Server soa_server1 gt WorkflowIdentityConfig gt human-workflowrsquo

4 Under the lsquoOperationsrsquo tab choose lsquocreateConfigurationrsquo option The following screen is displayed

5 Click lsquoInvokersquo button

1-9

The SOA displays the following confirmation message

Confirmation

Operation executed successfully

6 Refresh lsquoMBeanrsquo browser Go to lsquoWorkflowIdentityConfigConfigurationTypersquo under lsquohuman-workflowrsquo

7 Click lsquoNO_REALMrsquo On the right side select lsquoAttributesrsquo tab and change the value of lsquoDefaultrsquo from NO_REALM to lsquotruersquo

1-10

8 Further under the lsquoOperationsrsquo tab click lsquosetRealmNamersquo

9 The following screen is displayed

10 Specify the value of the parameter as lsquoflexcubersquo and click lsquoInvokersquo button

11 Refresh the lsquoMBeanrsquo browser Go to flexcube gt WorkflowIdentityConfigConfigurationTypeProviderType gt oraclesoamanagementconfigidentityProviderType Under the lsquoAttributesrsquo tab you need to make sure that the values of the following attributes are as per the table below

Attribute Value

Name JpsProvider1

1-11

PropertyType JPS

Service Identity

12 Under lsquoOperationsrsquo tab select the operation lsquoCreatePropertyrsquo and click lsquoInvokersquo button A new

Property is created under lsquoJpsProvider1rsquo

1-12

13 Select the new property and change its Name and Value

14 You can use the options lsquosetNamersquo and lsquosetValuersquo to update the name and value Change the name and value as per the following table

Name Value

jpsContextName flex

The value lsquoflexrsquo should match the value given for lsquojpsContextrsquo during JPS configuration

15 From the lsquoSystem MBean Browserrsquo select lsquojazncomrsquo

16 Under lsquoAttributesrsquo tab change the value of the attribute lsquoDefaultrsquo to lsquofalsersquo

1-13

17 Now restart the Weblogic and SOA servers After restarting the servers make sure the structure is as follows

124 Configuring Application Users and Policies To configure application policies refer the attached sample system-jazn-dataxml

system-jazn-dataxml

1 There are four ltapplicationgt in the ltapplicationsgt namely b2bui OracleBPMProcessRolesApp soa-infra and OracleBPMComposerRolesApp

2 Navigate to ltORACLE_HOMEgt user_projectsdomainsbase_domainconfigfmwconfig

3 Check system-jazn-dataxml available in this location whether ltapplicationgt is already available in the ltapplicationsgt

4 If the application is not available then paste the application content from the attached file inside the ltapplicationsgtltapplicationsgt

5 If the above mentioned ltapplicationgt is already there then replace the application content with the one available in the attached file

1-14

125 Configuring CIS

You need to configure the CIS details Follow the steps given below

1 Along with the Oracle FLEXCUBE UBS EAR file the Installer creates lsquoFCBPELCISjarrsquo file

2 Create a folder by name lsquoclassesrsquo at the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xrsquo

3 Extract the file lsquoFCBPELCISjarrsquo and copy the content of the folder lsquocomrsquo to lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassesrsquo

4 Now navigate to the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassescomofssfccbpelrsquo and delete the folders lsquodaorsquo and lsquosecurityrsquo

5 Navigate to the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassescomofssfccbpelcacrsquo Edit the properties file lsquoCISPropertiespropertiesrsquo and update lsquoJNDInamersquo with the JNDI name defined in the properties file lsquofcubspropertiesrsquo

6 Delete the folders CAC and soaext contents from the comofssfccbpel in FCBPELCISjar file location

7 Copy lsquoFCBPELCISjarrsquo to lsquoltMIDDLEWARE_HOMEgtuser_projectsdomainsltdomain_namegtlib

8 Once the above steps are completed restart the server

126 Configuring DBAdapter

In order to configure DBAdapter follow the steps given below

1 Log in to lsquoWeblogic Consolersquo and click lsquoDeploymentrsquo under lsquoDomain Structurersquo

1-15

2 In the Deployments table select lsquoDbAdapterrsquo You will be navigated to lsquoSettings for

DbAdapterrsquo

3 Click lsquoConfigurationrsquo tab and select lsquoOutbound Connection Poolsrsquo under it

4 Under lsquoGroups and Instancesrsquo click and expand lsquojavaxresourcecciConnectionFactoryrsquo

5 Click lsquoNewrsquo and select lsquojavaxresourcecciConnectionFactory in Outbound Connection Group

6 Define lsquoJNDI Namersquo as lsquoeisDBFCCDEVrsquo and click on lsquoFinishrsquo

1-16

The lsquojndi namersquo should be the same as the one in lsquoDbutility sub-processrsquo

7 Click lsquoDbAdapterrsquo again The new JNDI name is listed

8 Click on the hyperlink lsquoeisDBFCCDEVrsquo

9 Click the lsquoProperty Valuersquo field for the lsquoDataSourceNamersquo and update the application JNDI

reference (given in lsquofcubspropertiesrsquo file) and then press lsquoEnterrsquo key

10 Save and restart the Adminserver

127 Configuring JMS Adapter

Login in to console Click on JMS ServersNew

1-17

1-18

11 Please provide the below Name for JMS Server and select the file persistent store as belowNext

1-19

12 Select the target as SOA Server Finish

1-20

1-21

4 Go back to Console JMS ModulesNew

1-22

1-23

5 Create a JMS Module with the below NameNextSelect the target as SOA ServerFinish

1-24

1-25

1-26

6 Go back to JMS ModulesFCUBSJMSModuleNew

1-27

7 Click on Connection Factory nextCreate the connection Factory with the below NamesNext

1-28

1-29

8 Select Advanced targetingcreate New Sub Deployment with the below NameSelect the target as JMS server which we have created on topFinish

1-30

1-31

1-32

1-33

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 10: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-9

The SOA displays the following confirmation message

Confirmation

Operation executed successfully

6 Refresh lsquoMBeanrsquo browser Go to lsquoWorkflowIdentityConfigConfigurationTypersquo under lsquohuman-workflowrsquo

7 Click lsquoNO_REALMrsquo On the right side select lsquoAttributesrsquo tab and change the value of lsquoDefaultrsquo from NO_REALM to lsquotruersquo

1-10

8 Further under the lsquoOperationsrsquo tab click lsquosetRealmNamersquo

9 The following screen is displayed

10 Specify the value of the parameter as lsquoflexcubersquo and click lsquoInvokersquo button

11 Refresh the lsquoMBeanrsquo browser Go to flexcube gt WorkflowIdentityConfigConfigurationTypeProviderType gt oraclesoamanagementconfigidentityProviderType Under the lsquoAttributesrsquo tab you need to make sure that the values of the following attributes are as per the table below

Attribute Value

Name JpsProvider1

1-11

PropertyType JPS

Service Identity

12 Under lsquoOperationsrsquo tab select the operation lsquoCreatePropertyrsquo and click lsquoInvokersquo button A new

Property is created under lsquoJpsProvider1rsquo

1-12

13 Select the new property and change its Name and Value

14 You can use the options lsquosetNamersquo and lsquosetValuersquo to update the name and value Change the name and value as per the following table

Name Value

jpsContextName flex

The value lsquoflexrsquo should match the value given for lsquojpsContextrsquo during JPS configuration

15 From the lsquoSystem MBean Browserrsquo select lsquojazncomrsquo

16 Under lsquoAttributesrsquo tab change the value of the attribute lsquoDefaultrsquo to lsquofalsersquo

1-13

17 Now restart the Weblogic and SOA servers After restarting the servers make sure the structure is as follows

124 Configuring Application Users and Policies To configure application policies refer the attached sample system-jazn-dataxml

system-jazn-dataxml

1 There are four ltapplicationgt in the ltapplicationsgt namely b2bui OracleBPMProcessRolesApp soa-infra and OracleBPMComposerRolesApp

2 Navigate to ltORACLE_HOMEgt user_projectsdomainsbase_domainconfigfmwconfig

3 Check system-jazn-dataxml available in this location whether ltapplicationgt is already available in the ltapplicationsgt

4 If the application is not available then paste the application content from the attached file inside the ltapplicationsgtltapplicationsgt

5 If the above mentioned ltapplicationgt is already there then replace the application content with the one available in the attached file

1-14

125 Configuring CIS

You need to configure the CIS details Follow the steps given below

1 Along with the Oracle FLEXCUBE UBS EAR file the Installer creates lsquoFCBPELCISjarrsquo file

2 Create a folder by name lsquoclassesrsquo at the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xrsquo

3 Extract the file lsquoFCBPELCISjarrsquo and copy the content of the folder lsquocomrsquo to lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassesrsquo

4 Now navigate to the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassescomofssfccbpelrsquo and delete the folders lsquodaorsquo and lsquosecurityrsquo

5 Navigate to the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassescomofssfccbpelcacrsquo Edit the properties file lsquoCISPropertiespropertiesrsquo and update lsquoJNDInamersquo with the JNDI name defined in the properties file lsquofcubspropertiesrsquo

6 Delete the folders CAC and soaext contents from the comofssfccbpel in FCBPELCISjar file location

7 Copy lsquoFCBPELCISjarrsquo to lsquoltMIDDLEWARE_HOMEgtuser_projectsdomainsltdomain_namegtlib

8 Once the above steps are completed restart the server

126 Configuring DBAdapter

In order to configure DBAdapter follow the steps given below

1 Log in to lsquoWeblogic Consolersquo and click lsquoDeploymentrsquo under lsquoDomain Structurersquo

1-15

2 In the Deployments table select lsquoDbAdapterrsquo You will be navigated to lsquoSettings for

DbAdapterrsquo

3 Click lsquoConfigurationrsquo tab and select lsquoOutbound Connection Poolsrsquo under it

4 Under lsquoGroups and Instancesrsquo click and expand lsquojavaxresourcecciConnectionFactoryrsquo

5 Click lsquoNewrsquo and select lsquojavaxresourcecciConnectionFactory in Outbound Connection Group

6 Define lsquoJNDI Namersquo as lsquoeisDBFCCDEVrsquo and click on lsquoFinishrsquo

1-16

The lsquojndi namersquo should be the same as the one in lsquoDbutility sub-processrsquo

7 Click lsquoDbAdapterrsquo again The new JNDI name is listed

8 Click on the hyperlink lsquoeisDBFCCDEVrsquo

9 Click the lsquoProperty Valuersquo field for the lsquoDataSourceNamersquo and update the application JNDI

reference (given in lsquofcubspropertiesrsquo file) and then press lsquoEnterrsquo key

10 Save and restart the Adminserver

127 Configuring JMS Adapter

Login in to console Click on JMS ServersNew

1-17

1-18

11 Please provide the below Name for JMS Server and select the file persistent store as belowNext

1-19

12 Select the target as SOA Server Finish

1-20

1-21

4 Go back to Console JMS ModulesNew

1-22

1-23

5 Create a JMS Module with the below NameNextSelect the target as SOA ServerFinish

1-24

1-25

1-26

6 Go back to JMS ModulesFCUBSJMSModuleNew

1-27

7 Click on Connection Factory nextCreate the connection Factory with the below NamesNext

1-28

1-29

8 Select Advanced targetingcreate New Sub Deployment with the below NameSelect the target as JMS server which we have created on topFinish

1-30

1-31

1-32

1-33

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 11: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-10

8 Further under the lsquoOperationsrsquo tab click lsquosetRealmNamersquo

9 The following screen is displayed

10 Specify the value of the parameter as lsquoflexcubersquo and click lsquoInvokersquo button

11 Refresh the lsquoMBeanrsquo browser Go to flexcube gt WorkflowIdentityConfigConfigurationTypeProviderType gt oraclesoamanagementconfigidentityProviderType Under the lsquoAttributesrsquo tab you need to make sure that the values of the following attributes are as per the table below

Attribute Value

Name JpsProvider1

1-11

PropertyType JPS

Service Identity

12 Under lsquoOperationsrsquo tab select the operation lsquoCreatePropertyrsquo and click lsquoInvokersquo button A new

Property is created under lsquoJpsProvider1rsquo

1-12

13 Select the new property and change its Name and Value

14 You can use the options lsquosetNamersquo and lsquosetValuersquo to update the name and value Change the name and value as per the following table

Name Value

jpsContextName flex

The value lsquoflexrsquo should match the value given for lsquojpsContextrsquo during JPS configuration

15 From the lsquoSystem MBean Browserrsquo select lsquojazncomrsquo

16 Under lsquoAttributesrsquo tab change the value of the attribute lsquoDefaultrsquo to lsquofalsersquo

1-13

17 Now restart the Weblogic and SOA servers After restarting the servers make sure the structure is as follows

124 Configuring Application Users and Policies To configure application policies refer the attached sample system-jazn-dataxml

system-jazn-dataxml

1 There are four ltapplicationgt in the ltapplicationsgt namely b2bui OracleBPMProcessRolesApp soa-infra and OracleBPMComposerRolesApp

2 Navigate to ltORACLE_HOMEgt user_projectsdomainsbase_domainconfigfmwconfig

3 Check system-jazn-dataxml available in this location whether ltapplicationgt is already available in the ltapplicationsgt

4 If the application is not available then paste the application content from the attached file inside the ltapplicationsgtltapplicationsgt

5 If the above mentioned ltapplicationgt is already there then replace the application content with the one available in the attached file

1-14

125 Configuring CIS

You need to configure the CIS details Follow the steps given below

1 Along with the Oracle FLEXCUBE UBS EAR file the Installer creates lsquoFCBPELCISjarrsquo file

2 Create a folder by name lsquoclassesrsquo at the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xrsquo

3 Extract the file lsquoFCBPELCISjarrsquo and copy the content of the folder lsquocomrsquo to lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassesrsquo

4 Now navigate to the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassescomofssfccbpelrsquo and delete the folders lsquodaorsquo and lsquosecurityrsquo

5 Navigate to the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassescomofssfccbpelcacrsquo Edit the properties file lsquoCISPropertiespropertiesrsquo and update lsquoJNDInamersquo with the JNDI name defined in the properties file lsquofcubspropertiesrsquo

6 Delete the folders CAC and soaext contents from the comofssfccbpel in FCBPELCISjar file location

7 Copy lsquoFCBPELCISjarrsquo to lsquoltMIDDLEWARE_HOMEgtuser_projectsdomainsltdomain_namegtlib

8 Once the above steps are completed restart the server

126 Configuring DBAdapter

In order to configure DBAdapter follow the steps given below

1 Log in to lsquoWeblogic Consolersquo and click lsquoDeploymentrsquo under lsquoDomain Structurersquo

1-15

2 In the Deployments table select lsquoDbAdapterrsquo You will be navigated to lsquoSettings for

DbAdapterrsquo

3 Click lsquoConfigurationrsquo tab and select lsquoOutbound Connection Poolsrsquo under it

4 Under lsquoGroups and Instancesrsquo click and expand lsquojavaxresourcecciConnectionFactoryrsquo

5 Click lsquoNewrsquo and select lsquojavaxresourcecciConnectionFactory in Outbound Connection Group

6 Define lsquoJNDI Namersquo as lsquoeisDBFCCDEVrsquo and click on lsquoFinishrsquo

1-16

The lsquojndi namersquo should be the same as the one in lsquoDbutility sub-processrsquo

7 Click lsquoDbAdapterrsquo again The new JNDI name is listed

8 Click on the hyperlink lsquoeisDBFCCDEVrsquo

9 Click the lsquoProperty Valuersquo field for the lsquoDataSourceNamersquo and update the application JNDI

reference (given in lsquofcubspropertiesrsquo file) and then press lsquoEnterrsquo key

10 Save and restart the Adminserver

127 Configuring JMS Adapter

Login in to console Click on JMS ServersNew

1-17

1-18

11 Please provide the below Name for JMS Server and select the file persistent store as belowNext

1-19

12 Select the target as SOA Server Finish

1-20

1-21

4 Go back to Console JMS ModulesNew

1-22

1-23

5 Create a JMS Module with the below NameNextSelect the target as SOA ServerFinish

1-24

1-25

1-26

6 Go back to JMS ModulesFCUBSJMSModuleNew

1-27

7 Click on Connection Factory nextCreate the connection Factory with the below NamesNext

1-28

1-29

8 Select Advanced targetingcreate New Sub Deployment with the below NameSelect the target as JMS server which we have created on topFinish

1-30

1-31

1-32

1-33

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 12: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-11

PropertyType JPS

Service Identity

12 Under lsquoOperationsrsquo tab select the operation lsquoCreatePropertyrsquo and click lsquoInvokersquo button A new

Property is created under lsquoJpsProvider1rsquo

1-12

13 Select the new property and change its Name and Value

14 You can use the options lsquosetNamersquo and lsquosetValuersquo to update the name and value Change the name and value as per the following table

Name Value

jpsContextName flex

The value lsquoflexrsquo should match the value given for lsquojpsContextrsquo during JPS configuration

15 From the lsquoSystem MBean Browserrsquo select lsquojazncomrsquo

16 Under lsquoAttributesrsquo tab change the value of the attribute lsquoDefaultrsquo to lsquofalsersquo

1-13

17 Now restart the Weblogic and SOA servers After restarting the servers make sure the structure is as follows

124 Configuring Application Users and Policies To configure application policies refer the attached sample system-jazn-dataxml

system-jazn-dataxml

1 There are four ltapplicationgt in the ltapplicationsgt namely b2bui OracleBPMProcessRolesApp soa-infra and OracleBPMComposerRolesApp

2 Navigate to ltORACLE_HOMEgt user_projectsdomainsbase_domainconfigfmwconfig

3 Check system-jazn-dataxml available in this location whether ltapplicationgt is already available in the ltapplicationsgt

4 If the application is not available then paste the application content from the attached file inside the ltapplicationsgtltapplicationsgt

5 If the above mentioned ltapplicationgt is already there then replace the application content with the one available in the attached file

1-14

125 Configuring CIS

You need to configure the CIS details Follow the steps given below

1 Along with the Oracle FLEXCUBE UBS EAR file the Installer creates lsquoFCBPELCISjarrsquo file

2 Create a folder by name lsquoclassesrsquo at the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xrsquo

3 Extract the file lsquoFCBPELCISjarrsquo and copy the content of the folder lsquocomrsquo to lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassesrsquo

4 Now navigate to the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassescomofssfccbpelrsquo and delete the folders lsquodaorsquo and lsquosecurityrsquo

5 Navigate to the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassescomofssfccbpelcacrsquo Edit the properties file lsquoCISPropertiespropertiesrsquo and update lsquoJNDInamersquo with the JNDI name defined in the properties file lsquofcubspropertiesrsquo

6 Delete the folders CAC and soaext contents from the comofssfccbpel in FCBPELCISjar file location

7 Copy lsquoFCBPELCISjarrsquo to lsquoltMIDDLEWARE_HOMEgtuser_projectsdomainsltdomain_namegtlib

8 Once the above steps are completed restart the server

126 Configuring DBAdapter

In order to configure DBAdapter follow the steps given below

1 Log in to lsquoWeblogic Consolersquo and click lsquoDeploymentrsquo under lsquoDomain Structurersquo

1-15

2 In the Deployments table select lsquoDbAdapterrsquo You will be navigated to lsquoSettings for

DbAdapterrsquo

3 Click lsquoConfigurationrsquo tab and select lsquoOutbound Connection Poolsrsquo under it

4 Under lsquoGroups and Instancesrsquo click and expand lsquojavaxresourcecciConnectionFactoryrsquo

5 Click lsquoNewrsquo and select lsquojavaxresourcecciConnectionFactory in Outbound Connection Group

6 Define lsquoJNDI Namersquo as lsquoeisDBFCCDEVrsquo and click on lsquoFinishrsquo

1-16

The lsquojndi namersquo should be the same as the one in lsquoDbutility sub-processrsquo

7 Click lsquoDbAdapterrsquo again The new JNDI name is listed

8 Click on the hyperlink lsquoeisDBFCCDEVrsquo

9 Click the lsquoProperty Valuersquo field for the lsquoDataSourceNamersquo and update the application JNDI

reference (given in lsquofcubspropertiesrsquo file) and then press lsquoEnterrsquo key

10 Save and restart the Adminserver

127 Configuring JMS Adapter

Login in to console Click on JMS ServersNew

1-17

1-18

11 Please provide the below Name for JMS Server and select the file persistent store as belowNext

1-19

12 Select the target as SOA Server Finish

1-20

1-21

4 Go back to Console JMS ModulesNew

1-22

1-23

5 Create a JMS Module with the below NameNextSelect the target as SOA ServerFinish

1-24

1-25

1-26

6 Go back to JMS ModulesFCUBSJMSModuleNew

1-27

7 Click on Connection Factory nextCreate the connection Factory with the below NamesNext

1-28

1-29

8 Select Advanced targetingcreate New Sub Deployment with the below NameSelect the target as JMS server which we have created on topFinish

1-30

1-31

1-32

1-33

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 13: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-12

13 Select the new property and change its Name and Value

14 You can use the options lsquosetNamersquo and lsquosetValuersquo to update the name and value Change the name and value as per the following table

Name Value

jpsContextName flex

The value lsquoflexrsquo should match the value given for lsquojpsContextrsquo during JPS configuration

15 From the lsquoSystem MBean Browserrsquo select lsquojazncomrsquo

16 Under lsquoAttributesrsquo tab change the value of the attribute lsquoDefaultrsquo to lsquofalsersquo

1-13

17 Now restart the Weblogic and SOA servers After restarting the servers make sure the structure is as follows

124 Configuring Application Users and Policies To configure application policies refer the attached sample system-jazn-dataxml

system-jazn-dataxml

1 There are four ltapplicationgt in the ltapplicationsgt namely b2bui OracleBPMProcessRolesApp soa-infra and OracleBPMComposerRolesApp

2 Navigate to ltORACLE_HOMEgt user_projectsdomainsbase_domainconfigfmwconfig

3 Check system-jazn-dataxml available in this location whether ltapplicationgt is already available in the ltapplicationsgt

4 If the application is not available then paste the application content from the attached file inside the ltapplicationsgtltapplicationsgt

5 If the above mentioned ltapplicationgt is already there then replace the application content with the one available in the attached file

1-14

125 Configuring CIS

You need to configure the CIS details Follow the steps given below

1 Along with the Oracle FLEXCUBE UBS EAR file the Installer creates lsquoFCBPELCISjarrsquo file

2 Create a folder by name lsquoclassesrsquo at the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xrsquo

3 Extract the file lsquoFCBPELCISjarrsquo and copy the content of the folder lsquocomrsquo to lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassesrsquo

4 Now navigate to the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassescomofssfccbpelrsquo and delete the folders lsquodaorsquo and lsquosecurityrsquo

5 Navigate to the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassescomofssfccbpelcacrsquo Edit the properties file lsquoCISPropertiespropertiesrsquo and update lsquoJNDInamersquo with the JNDI name defined in the properties file lsquofcubspropertiesrsquo

6 Delete the folders CAC and soaext contents from the comofssfccbpel in FCBPELCISjar file location

7 Copy lsquoFCBPELCISjarrsquo to lsquoltMIDDLEWARE_HOMEgtuser_projectsdomainsltdomain_namegtlib

8 Once the above steps are completed restart the server

126 Configuring DBAdapter

In order to configure DBAdapter follow the steps given below

1 Log in to lsquoWeblogic Consolersquo and click lsquoDeploymentrsquo under lsquoDomain Structurersquo

1-15

2 In the Deployments table select lsquoDbAdapterrsquo You will be navigated to lsquoSettings for

DbAdapterrsquo

3 Click lsquoConfigurationrsquo tab and select lsquoOutbound Connection Poolsrsquo under it

4 Under lsquoGroups and Instancesrsquo click and expand lsquojavaxresourcecciConnectionFactoryrsquo

5 Click lsquoNewrsquo and select lsquojavaxresourcecciConnectionFactory in Outbound Connection Group

6 Define lsquoJNDI Namersquo as lsquoeisDBFCCDEVrsquo and click on lsquoFinishrsquo

1-16

The lsquojndi namersquo should be the same as the one in lsquoDbutility sub-processrsquo

7 Click lsquoDbAdapterrsquo again The new JNDI name is listed

8 Click on the hyperlink lsquoeisDBFCCDEVrsquo

9 Click the lsquoProperty Valuersquo field for the lsquoDataSourceNamersquo and update the application JNDI

reference (given in lsquofcubspropertiesrsquo file) and then press lsquoEnterrsquo key

10 Save and restart the Adminserver

127 Configuring JMS Adapter

Login in to console Click on JMS ServersNew

1-17

1-18

11 Please provide the below Name for JMS Server and select the file persistent store as belowNext

1-19

12 Select the target as SOA Server Finish

1-20

1-21

4 Go back to Console JMS ModulesNew

1-22

1-23

5 Create a JMS Module with the below NameNextSelect the target as SOA ServerFinish

1-24

1-25

1-26

6 Go back to JMS ModulesFCUBSJMSModuleNew

1-27

7 Click on Connection Factory nextCreate the connection Factory with the below NamesNext

1-28

1-29

8 Select Advanced targetingcreate New Sub Deployment with the below NameSelect the target as JMS server which we have created on topFinish

1-30

1-31

1-32

1-33

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 14: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-13

17 Now restart the Weblogic and SOA servers After restarting the servers make sure the structure is as follows

124 Configuring Application Users and Policies To configure application policies refer the attached sample system-jazn-dataxml

system-jazn-dataxml

1 There are four ltapplicationgt in the ltapplicationsgt namely b2bui OracleBPMProcessRolesApp soa-infra and OracleBPMComposerRolesApp

2 Navigate to ltORACLE_HOMEgt user_projectsdomainsbase_domainconfigfmwconfig

3 Check system-jazn-dataxml available in this location whether ltapplicationgt is already available in the ltapplicationsgt

4 If the application is not available then paste the application content from the attached file inside the ltapplicationsgtltapplicationsgt

5 If the above mentioned ltapplicationgt is already there then replace the application content with the one available in the attached file

1-14

125 Configuring CIS

You need to configure the CIS details Follow the steps given below

1 Along with the Oracle FLEXCUBE UBS EAR file the Installer creates lsquoFCBPELCISjarrsquo file

2 Create a folder by name lsquoclassesrsquo at the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xrsquo

3 Extract the file lsquoFCBPELCISjarrsquo and copy the content of the folder lsquocomrsquo to lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassesrsquo

4 Now navigate to the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassescomofssfccbpelrsquo and delete the folders lsquodaorsquo and lsquosecurityrsquo

5 Navigate to the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassescomofssfccbpelcacrsquo Edit the properties file lsquoCISPropertiespropertiesrsquo and update lsquoJNDInamersquo with the JNDI name defined in the properties file lsquofcubspropertiesrsquo

6 Delete the folders CAC and soaext contents from the comofssfccbpel in FCBPELCISjar file location

7 Copy lsquoFCBPELCISjarrsquo to lsquoltMIDDLEWARE_HOMEgtuser_projectsdomainsltdomain_namegtlib

8 Once the above steps are completed restart the server

126 Configuring DBAdapter

In order to configure DBAdapter follow the steps given below

1 Log in to lsquoWeblogic Consolersquo and click lsquoDeploymentrsquo under lsquoDomain Structurersquo

1-15

2 In the Deployments table select lsquoDbAdapterrsquo You will be navigated to lsquoSettings for

DbAdapterrsquo

3 Click lsquoConfigurationrsquo tab and select lsquoOutbound Connection Poolsrsquo under it

4 Under lsquoGroups and Instancesrsquo click and expand lsquojavaxresourcecciConnectionFactoryrsquo

5 Click lsquoNewrsquo and select lsquojavaxresourcecciConnectionFactory in Outbound Connection Group

6 Define lsquoJNDI Namersquo as lsquoeisDBFCCDEVrsquo and click on lsquoFinishrsquo

1-16

The lsquojndi namersquo should be the same as the one in lsquoDbutility sub-processrsquo

7 Click lsquoDbAdapterrsquo again The new JNDI name is listed

8 Click on the hyperlink lsquoeisDBFCCDEVrsquo

9 Click the lsquoProperty Valuersquo field for the lsquoDataSourceNamersquo and update the application JNDI

reference (given in lsquofcubspropertiesrsquo file) and then press lsquoEnterrsquo key

10 Save and restart the Adminserver

127 Configuring JMS Adapter

Login in to console Click on JMS ServersNew

1-17

1-18

11 Please provide the below Name for JMS Server and select the file persistent store as belowNext

1-19

12 Select the target as SOA Server Finish

1-20

1-21

4 Go back to Console JMS ModulesNew

1-22

1-23

5 Create a JMS Module with the below NameNextSelect the target as SOA ServerFinish

1-24

1-25

1-26

6 Go back to JMS ModulesFCUBSJMSModuleNew

1-27

7 Click on Connection Factory nextCreate the connection Factory with the below NamesNext

1-28

1-29

8 Select Advanced targetingcreate New Sub Deployment with the below NameSelect the target as JMS server which we have created on topFinish

1-30

1-31

1-32

1-33

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 15: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-14

125 Configuring CIS

You need to configure the CIS details Follow the steps given below

1 Along with the Oracle FLEXCUBE UBS EAR file the Installer creates lsquoFCBPELCISjarrsquo file

2 Create a folder by name lsquoclassesrsquo at the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xrsquo

3 Extract the file lsquoFCBPELCISjarrsquo and copy the content of the folder lsquocomrsquo to lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassesrsquo

4 Now navigate to the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassescomofssfccbpelrsquo and delete the folders lsquodaorsquo and lsquosecurityrsquo

5 Navigate to the location lsquoltMIDDLEWARE_HOMEgtsoasoamodulesoraclesoaext_111xclassescomofssfccbpelcacrsquo Edit the properties file lsquoCISPropertiespropertiesrsquo and update lsquoJNDInamersquo with the JNDI name defined in the properties file lsquofcubspropertiesrsquo

6 Delete the folders CAC and soaext contents from the comofssfccbpel in FCBPELCISjar file location

7 Copy lsquoFCBPELCISjarrsquo to lsquoltMIDDLEWARE_HOMEgtuser_projectsdomainsltdomain_namegtlib

8 Once the above steps are completed restart the server

126 Configuring DBAdapter

In order to configure DBAdapter follow the steps given below

1 Log in to lsquoWeblogic Consolersquo and click lsquoDeploymentrsquo under lsquoDomain Structurersquo

1-15

2 In the Deployments table select lsquoDbAdapterrsquo You will be navigated to lsquoSettings for

DbAdapterrsquo

3 Click lsquoConfigurationrsquo tab and select lsquoOutbound Connection Poolsrsquo under it

4 Under lsquoGroups and Instancesrsquo click and expand lsquojavaxresourcecciConnectionFactoryrsquo

5 Click lsquoNewrsquo and select lsquojavaxresourcecciConnectionFactory in Outbound Connection Group

6 Define lsquoJNDI Namersquo as lsquoeisDBFCCDEVrsquo and click on lsquoFinishrsquo

1-16

The lsquojndi namersquo should be the same as the one in lsquoDbutility sub-processrsquo

7 Click lsquoDbAdapterrsquo again The new JNDI name is listed

8 Click on the hyperlink lsquoeisDBFCCDEVrsquo

9 Click the lsquoProperty Valuersquo field for the lsquoDataSourceNamersquo and update the application JNDI

reference (given in lsquofcubspropertiesrsquo file) and then press lsquoEnterrsquo key

10 Save and restart the Adminserver

127 Configuring JMS Adapter

Login in to console Click on JMS ServersNew

1-17

1-18

11 Please provide the below Name for JMS Server and select the file persistent store as belowNext

1-19

12 Select the target as SOA Server Finish

1-20

1-21

4 Go back to Console JMS ModulesNew

1-22

1-23

5 Create a JMS Module with the below NameNextSelect the target as SOA ServerFinish

1-24

1-25

1-26

6 Go back to JMS ModulesFCUBSJMSModuleNew

1-27

7 Click on Connection Factory nextCreate the connection Factory with the below NamesNext

1-28

1-29

8 Select Advanced targetingcreate New Sub Deployment with the below NameSelect the target as JMS server which we have created on topFinish

1-30

1-31

1-32

1-33

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 16: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-15

2 In the Deployments table select lsquoDbAdapterrsquo You will be navigated to lsquoSettings for

DbAdapterrsquo

3 Click lsquoConfigurationrsquo tab and select lsquoOutbound Connection Poolsrsquo under it

4 Under lsquoGroups and Instancesrsquo click and expand lsquojavaxresourcecciConnectionFactoryrsquo

5 Click lsquoNewrsquo and select lsquojavaxresourcecciConnectionFactory in Outbound Connection Group

6 Define lsquoJNDI Namersquo as lsquoeisDBFCCDEVrsquo and click on lsquoFinishrsquo

1-16

The lsquojndi namersquo should be the same as the one in lsquoDbutility sub-processrsquo

7 Click lsquoDbAdapterrsquo again The new JNDI name is listed

8 Click on the hyperlink lsquoeisDBFCCDEVrsquo

9 Click the lsquoProperty Valuersquo field for the lsquoDataSourceNamersquo and update the application JNDI

reference (given in lsquofcubspropertiesrsquo file) and then press lsquoEnterrsquo key

10 Save and restart the Adminserver

127 Configuring JMS Adapter

Login in to console Click on JMS ServersNew

1-17

1-18

11 Please provide the below Name for JMS Server and select the file persistent store as belowNext

1-19

12 Select the target as SOA Server Finish

1-20

1-21

4 Go back to Console JMS ModulesNew

1-22

1-23

5 Create a JMS Module with the below NameNextSelect the target as SOA ServerFinish

1-24

1-25

1-26

6 Go back to JMS ModulesFCUBSJMSModuleNew

1-27

7 Click on Connection Factory nextCreate the connection Factory with the below NamesNext

1-28

1-29

8 Select Advanced targetingcreate New Sub Deployment with the below NameSelect the target as JMS server which we have created on topFinish

1-30

1-31

1-32

1-33

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 17: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-16

The lsquojndi namersquo should be the same as the one in lsquoDbutility sub-processrsquo

7 Click lsquoDbAdapterrsquo again The new JNDI name is listed

8 Click on the hyperlink lsquoeisDBFCCDEVrsquo

9 Click the lsquoProperty Valuersquo field for the lsquoDataSourceNamersquo and update the application JNDI

reference (given in lsquofcubspropertiesrsquo file) and then press lsquoEnterrsquo key

10 Save and restart the Adminserver

127 Configuring JMS Adapter

Login in to console Click on JMS ServersNew

1-17

1-18

11 Please provide the below Name for JMS Server and select the file persistent store as belowNext

1-19

12 Select the target as SOA Server Finish

1-20

1-21

4 Go back to Console JMS ModulesNew

1-22

1-23

5 Create a JMS Module with the below NameNextSelect the target as SOA ServerFinish

1-24

1-25

1-26

6 Go back to JMS ModulesFCUBSJMSModuleNew

1-27

7 Click on Connection Factory nextCreate the connection Factory with the below NamesNext

1-28

1-29

8 Select Advanced targetingcreate New Sub Deployment with the below NameSelect the target as JMS server which we have created on topFinish

1-30

1-31

1-32

1-33

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 18: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-17

1-18

11 Please provide the below Name for JMS Server and select the file persistent store as belowNext

1-19

12 Select the target as SOA Server Finish

1-20

1-21

4 Go back to Console JMS ModulesNew

1-22

1-23

5 Create a JMS Module with the below NameNextSelect the target as SOA ServerFinish

1-24

1-25

1-26

6 Go back to JMS ModulesFCUBSJMSModuleNew

1-27

7 Click on Connection Factory nextCreate the connection Factory with the below NamesNext

1-28

1-29

8 Select Advanced targetingcreate New Sub Deployment with the below NameSelect the target as JMS server which we have created on topFinish

1-30

1-31

1-32

1-33

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 19: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-18

11 Please provide the below Name for JMS Server and select the file persistent store as belowNext

1-19

12 Select the target as SOA Server Finish

1-20

1-21

4 Go back to Console JMS ModulesNew

1-22

1-23

5 Create a JMS Module with the below NameNextSelect the target as SOA ServerFinish

1-24

1-25

1-26

6 Go back to JMS ModulesFCUBSJMSModuleNew

1-27

7 Click on Connection Factory nextCreate the connection Factory with the below NamesNext

1-28

1-29

8 Select Advanced targetingcreate New Sub Deployment with the below NameSelect the target as JMS server which we have created on topFinish

1-30

1-31

1-32

1-33

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 20: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-19

12 Select the target as SOA Server Finish

1-20

1-21

4 Go back to Console JMS ModulesNew

1-22

1-23

5 Create a JMS Module with the below NameNextSelect the target as SOA ServerFinish

1-24

1-25

1-26

6 Go back to JMS ModulesFCUBSJMSModuleNew

1-27

7 Click on Connection Factory nextCreate the connection Factory with the below NamesNext

1-28

1-29

8 Select Advanced targetingcreate New Sub Deployment with the below NameSelect the target as JMS server which we have created on topFinish

1-30

1-31

1-32

1-33

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 21: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-20

1-21

4 Go back to Console JMS ModulesNew

1-22

1-23

5 Create a JMS Module with the below NameNextSelect the target as SOA ServerFinish

1-24

1-25

1-26

6 Go back to JMS ModulesFCUBSJMSModuleNew

1-27

7 Click on Connection Factory nextCreate the connection Factory with the below NamesNext

1-28

1-29

8 Select Advanced targetingcreate New Sub Deployment with the below NameSelect the target as JMS server which we have created on topFinish

1-30

1-31

1-32

1-33

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 22: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-21

4 Go back to Console JMS ModulesNew

1-22

1-23

5 Create a JMS Module with the below NameNextSelect the target as SOA ServerFinish

1-24

1-25

1-26

6 Go back to JMS ModulesFCUBSJMSModuleNew

1-27

7 Click on Connection Factory nextCreate the connection Factory with the below NamesNext

1-28

1-29

8 Select Advanced targetingcreate New Sub Deployment with the below NameSelect the target as JMS server which we have created on topFinish

1-30

1-31

1-32

1-33

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 23: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-22

1-23

5 Create a JMS Module with the below NameNextSelect the target as SOA ServerFinish

1-24

1-25

1-26

6 Go back to JMS ModulesFCUBSJMSModuleNew

1-27

7 Click on Connection Factory nextCreate the connection Factory with the below NamesNext

1-28

1-29

8 Select Advanced targetingcreate New Sub Deployment with the below NameSelect the target as JMS server which we have created on topFinish

1-30

1-31

1-32

1-33

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 24: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-23

5 Create a JMS Module with the below NameNextSelect the target as SOA ServerFinish

1-24

1-25

1-26

6 Go back to JMS ModulesFCUBSJMSModuleNew

1-27

7 Click on Connection Factory nextCreate the connection Factory with the below NamesNext

1-28

1-29

8 Select Advanced targetingcreate New Sub Deployment with the below NameSelect the target as JMS server which we have created on topFinish

1-30

1-31

1-32

1-33

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 25: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-24

1-25

1-26

6 Go back to JMS ModulesFCUBSJMSModuleNew

1-27

7 Click on Connection Factory nextCreate the connection Factory with the below NamesNext

1-28

1-29

8 Select Advanced targetingcreate New Sub Deployment with the below NameSelect the target as JMS server which we have created on topFinish

1-30

1-31

1-32

1-33

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 26: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-25

1-26

6 Go back to JMS ModulesFCUBSJMSModuleNew

1-27

7 Click on Connection Factory nextCreate the connection Factory with the below NamesNext

1-28

1-29

8 Select Advanced targetingcreate New Sub Deployment with the below NameSelect the target as JMS server which we have created on topFinish

1-30

1-31

1-32

1-33

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 27: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-26

6 Go back to JMS ModulesFCUBSJMSModuleNew

1-27

7 Click on Connection Factory nextCreate the connection Factory with the below NamesNext

1-28

1-29

8 Select Advanced targetingcreate New Sub Deployment with the below NameSelect the target as JMS server which we have created on topFinish

1-30

1-31

1-32

1-33

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 28: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-27

7 Click on Connection Factory nextCreate the connection Factory with the below NamesNext

1-28

1-29

8 Select Advanced targetingcreate New Sub Deployment with the below NameSelect the target as JMS server which we have created on topFinish

1-30

1-31

1-32

1-33

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 29: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-28

1-29

8 Select Advanced targetingcreate New Sub Deployment with the below NameSelect the target as JMS server which we have created on topFinish

1-30

1-31

1-32

1-33

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 30: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-29

8 Select Advanced targetingcreate New Sub Deployment with the below NameSelect the target as JMS server which we have created on topFinish

1-30

1-31

1-32

1-33

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 31: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-30

1-31

1-32

1-33

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 32: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-31

1-32

1-33

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 33: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-32

1-33

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 34: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-33

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 35: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-34

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 36: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-35

9 Go back to console Click on JMS Modules New check on Queuenext

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 37: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-36

10 Create Queue with Name NOTIFY_DEST_QUEUE and JNDI name as jmsNOTIFY_DEST_QUEUEselect the sub deployment which we have created earlier NextFinsish

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 38: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-37

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 39: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-38

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 40: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-39

11 Please create the MDB_QUEUE_RESPONSE eisjmsORGateway FAULT_QUEUE_RESPONSE Queues as above in console with in FCUBSJMSModule(Follow step 9-10 in 127)

12 Go to ConsoleDeploymentJMS Adapter Configurationoutbound connection poolNew nextFinish

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 41: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-40

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 42: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-41

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 43: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-42

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 44: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-43

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 45: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-44

11 Click on the Outbound connection pool with eisQueueNotif and enter the connection factory location as jndiFCUBSConnectionfactorypress Enter and Save

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 46: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-45

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 47: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-46

15 Go to console DeploymentsJMS adapterUpdateNext Next finish

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 48: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-47

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 49: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-48

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 50: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-49

16 Create the out bound connection pool with the eiswlsQueue name in the Deployments using connection factory jndiFCUBSConnectionfactory

128 Configuring FTP Adapter

1 Login to consoleDeployments FTP AdapterConfigurationOutbound Connection PoolNew

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 51: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-50

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 52: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-51

2)Click finish and save

129 BIP Interactive reports configuration 1) Login to the BIP domain console httpslthostnamegtltportgtconsole

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 53: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-52

After adding Navigate to security realms gtmyrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) Login to the Enterprise Manager (em) httpslthostnamegtltportgtem

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application roles

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 54: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-53

4) After navigating to next screen as in below screenshot

bull Select application stripe as obi

bull Click on the search button

bull Click on create button to add a role

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 55: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-54

5) After navigating to next screen as in below screenshot

bull Enter the role name(mandatory) display name(optional) description(optional)

bull Click on the Add button

bull In the Add Principal pop up select type as ldquoGrouprdquo

bull In the advanced option check the checkbox and again select the type as ldquoGrouprdquo below

o Click on the Search button if the roles are listed then select the roles like ALLROLES-000 ADMINROLE-000 from the list

or

o Enter the Principal Name (mandatory) which is actually the role present in the FCUBS (ex ALLROLES-000 ADMINROLE-000) Display Name (optional)

bull After completing click on OK button in pop up window and also in the screen

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 56: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-55

6) After getting information message like ldquoA new role added successfullyrdquo then again

bull Right click on the domain(in which BI suite is installed) under the weblogic domain

bull Go to security and then navigate to application polices

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 57: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-56

7) After navigating to next screen as per screen shot

o Select the application stripe as obi principal type as ldquoApplication Rolerdquo

o Click on the search button

o Select BIConsumer(it should be highlighted) from the list and click on the create like button

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 58: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-57

8) After navigating to next screen as per the screen shot

bull Click on Add button a new window ldquoAdd Principalrdquo will be launched

bull Select Type as ldquoApplication Rolerdquo and click on the search button

bull From the list select the role that has been created earlier in application role screen and click on OK button in pop up window and screen

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 59: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-58

bull Click Add button under Permissions and add the two permissions one by one as mentioned below

oraclebipublisherrunReportOnline

oraclebipublisheraccessReportOutput

9) After getting information message like ldquoA security added successfullyrdquo

o Login into the BIPublisher httpslthostnamegtltportgtxmlpserver

o Click on the Administration

o Click on the Roles and Permission under Security center and check if the added role(in em) is displayed If not restart the servers

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 60: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-59

10) Then click on the Catalog then on the folder that has been created and then on permissions

11) After clicking on the permissions a new window will pop up delete all the roles if any present on click of permissions then click on Add button and then click on search button in ldquoAdd Rolesrdquo window that is launched newly and select the role that has been created and click on move button and click on OK

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 61: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-60

12) Finally the role will be added and select the options that has to be provided for the particular role and check if the permissions is only to items within the folder if necessary

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 62: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-61

Now the reports in the folder will be accessed accordingly based on the roles

Note

In the similar way we can set the permissions at report level also for particular role

13 Please login in to Bi Publisher httpserverportxmlpserver

14 Click on Adminstration JDBC connectionAdd Data Source

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 63: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-62

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 64: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-63

15 Please create the data source with data source name as FCSOA and use soa schema details to create the same

16 Add the fcubs roles to allowed Roles under security

17 Click on test connection once the connection is established succesfuly Click on Apply

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 65: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-64

18 Please follow the steps 15 to 17 to create data source for FCUBS Schema and give the name as FCBIPBPEL

1210 BAM Report Configuration settings 1 Generate a deployment plan for BAM Composer Application 2 Login in to console httphostnameportconsole 3 Click on Deploymentsclick on BAM Composer

4 click on Configuration Configuration Save

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 66: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-65

5 Click on Overviewcheck the deployment plan location

6 Add variable and variable assignment as below to the Planxml in

ltmodule-namegtBamComposerWebwarltmodule-namegt and for reference please find planxml file

ltvariablegt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 67: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-66

ltvaluegtneverltvaluegt ltvariablegt ltmodule-descriptor external=truegt ltroot-elementgtweb-appltroot-elementgt lturigtWEB-INFwebxmllturigt ltvariable-assignmentgt ltnamegtoracleadfviewrichsecurityFRAME_BUSTINGltnamegt ltxpathgtweb-appcontext-param[param-name=oracleadfviewrichsecurityFRAME_BUSTING]param-valueltxpathgt ltorigingtplanbasedltorigingt ltvariable-assignmentgt ltmodule-descriptorgt

Plan3xml

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 68: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-67

7 Stop the BAM composer application in console

8 Update the deployment plan 9 Click on deployments click on BAM Composer checkbox Click on update

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 69: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-68

10 select the Update this application in place with new deployment plan changes and click on change path button

11 Select the latest planxml in the in the pathnextnextFinish

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 70: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-69

12 Restart the BAM Composer application in the console

13 Login in to em console httphostnameportem

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 71: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-70

14 Right Click on BAM ServerSecurityApplication Roles

15 Click on Create create application role with ALL ROLES-000Click on ADD button in the Members

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 72: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-71

16 Select the Type as Group and add principle details be referring the below screen shot

17 Login to BAM Composer httphostnameportbamcomposer--gt Click on Administrator

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 73: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-72

18 Go to Data ObjectRight Click on CUBE_INSTANCESecurity

19 Click on Add button under Grant permission and search the list based on the Application Role

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 74: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-73

20 Move the ALLROLES-000 to Selected members

21 Click on read select and Update check boxes Click on Save

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 75: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-74

22 Follow the step 17 to 21 for other Data objects also(cube_instancewftask_different_stages ORVW_TRACK_EXPOSURE ORVW_FACILITY_EXPOSURE GetUtilsDB SMTB_USER_TYPE_CONVERSION_VIEW FCUBSDATAOBJECTS)

23 Click on Designer open Project

24 Click on FCUBS_BAM_report

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 76: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-75

25 click on FCUBS_BAM_Report Security

26 Click on ADD button Under Grant Permission

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 77: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-76

27 Search the List based on the Application Roles and Select the ALLROLES-000

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 78: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-77

28 Move the ALLROLES-000 to Selected Members and click on ok

29 Select the Read check box for ALLROLES-000 Click on Save

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 79: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-78

1211 IPM configuration to edit the document 1) Login to the console httpslthostnamegtltportgtconsole with admin user

2) Follow the step 121 to add the ldquoFCJCustomProviderrdquo

After adding Navigate to security realms gt myrealm gt Users and Groups and check if the users from the schema are displayed in Users tab and Roles from the schema are displayed under the Groups Tab

3) After adding the custom authenticator

bull Navigate to security realms gtmy realm gt Users and Groups gt Groups

bull Click on the New button

4) After Clicking on the new button

bull Enter the name as ldquoIPMUserGrouprdquo

bull Description for it (optional)

bull And select the authenticator as ldquoDefaultAuthenticatorrdquo

bull And then click ldquoOkrdquo

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 80: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-79

5) Login to the Imaging URL httpslthostnamegtltportgtimaging with admin user

a Navigate to Manage Applications

b Click on the FLEXCUBE

c Then click on the modify on the right pane

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 81: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-80

6) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel select view writeannotate StandardAnnotate Restricted and Annotate Hidden checkboxes

g Finally click on the submit button on the right corner

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 82: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-81

7) After clicking on the submit button

a Navigate to Manage Searches

b Click on the available search (ex USER_ID in this doc)

c Click on the modify

8) After clicking on the modify button

a Navigate to Document Security

b Click on Add button

c Click on Search button in the pop up window

d Select the ldquoIPMUserGrouprdquo

e Click on Add

f IPMUserGroup will be listed in the panel donrsquot select any checkbox except the default view checkbox

g Finally click on the submit button on the right corner

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 83: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-82

ltserviceProvider class=oraclesecurityjpsinternalidstoregenericGenericIdentityStoreProvider name=customgenericprovider type=IDENTITY_STOREgt

ltdescriptiongtDB IdentityStore Providerltdescriptiongt ltserviceProvidergt

ltserviceInstance location=dumb name=idstorecustom provider=customgenericprovidergt ltdescriptiongtCustom Identity Store Service Instanceltdescriptiongt ltproperty name=idstoretype value=CUSTOMgt ltproperty name=ADF_IM_FACTORY_CLASS value=comofssfccbpelsecurityidmprovidersstddbFCIdentityStoreFactorygt ltproperty name=DATASOURCE_NAME value=jdbcfcjdevDSgt ltproperty name=INTERNAL_CONTEXT_REQUIRED value=truegt ltproperty name=INTERNAL_CONTEXT_NAME value=internalstoregt ltserviceInstancegt

9) Copy the FCBPELCISjar to location

ltORACLE_HOME gtuser_projectsdomainsltdomian namegtlib

10) Go to the location ndash lsquoltORACLE_HOMEgt user_projectsdomainsltDomain_createdgtconfigfmwconfigrsquo

a Open lsquojps-configxmlrsquo file Search for lsquoltserviceProvidersgtrsquo tag and add the following code between lsquoltserviceProvidersgtrsquo and lsquoltserviceProvidersgtrsquo tags

b Similarly Search for lsquoltserviceInstancesgtrsquo tag and add the following code between lsquoltserviceInstancesgtrsquo and lsquoltserviceInstancesgtrsquo tags

Make sure that the JNDI (jdbcfcjdevDS) matches the value given during property file creation

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 84: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-83

ltjpsContext name=internalstoregt ltserviceInstanceRef ref=credstoregt ltserviceInstanceRef ref=keystoregt ltserviceInstanceRef ref=policystorexmlgt ltserviceInstanceRef ref=auditgt ltserviceInstanceRef ref=idstoreldapgt ltjpsContextgt

c Search for lsquoltjpsContext name=defaultgtrsquo tag and modify the reference lsquoltserviceInstanceRef ref=idstoreldapgtrsquo to lsquoltserviceInstanceRef ref=idstorecustomgtrsquo between lsquoltjpsContext name=defaultgtrsquo and ltjpsContextgt

d Search for lsquoltjpsContexts default=defaultgtrsquo tag and add the following code between lsquoltjpsContexts default=defaultgtrsquo and lsquoltjpsContextsgtrsquo preferably after the default lsquojpsContextrsquo

1212 Configuring Superviser Roles in EM 1 Right click on soa-infra Select securityapplication policies

2 Click on create

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 85: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-84

3 Select Principal Name as lsquoGrouprsquo from drop down list

4 Click on lsquoAdvanced optionrsquo

5 Click on the check box and provide the group from drop down

6 Provide the principal name as (OR-SUPERVISOR-000)

This will be role in flexcube for the supervisior The branch will be coded manually Ie if the branch code is CHO then the role to be created is (OR-SUPERVISOR-CHO)

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 86: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-85

7 Add permission for the grantee

8 Select permission class as mentioned and click on the play button

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 87: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-86

9 Select workflowadmin from the search result and give continue

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 88: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-87

10 Click OK on Application Grant Page

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 89: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-88

1213 Email Driver Configuration

1 Login to EM console

2 Navigate to User Messaging Service

3 Right click usermessagingdriver-email (soa_server1)

4 Click on Email Driver Properties

5 Enter the sender Address and default sender address (This id will be used as sender

address)

6 Enter the supported protocols (SMTP)

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 90: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-89

7 Select the mail access protocol (IMAP) as per the mail server specification

8 Enter the Receive folder in the mailbox (INBOX)

9 Enter the Outgoing mail server hostname or IP

10 Enter the outgoing mail server port

11 Enter the outgoing default from address

12 Enter the Outgoing user name and password if required

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 91: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-90

13 Navigate to SOA Administration -gtWorkflow Properties

14 Select the notification mode as EmailALL and enter the from address Actionable address

and reply to Address

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 92: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-91

1214 TimeOut Settings for BPEL 1 Login in to Console (httphostnameportconsole)

2 Click on Deployments

3 Click on SOA_INFRA Application under deployments

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 93: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-92

4 Click on BPEL Engine EJBConfigurationset Transaction Time Out to 300

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 94: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-93

5 Go to EJBsBPEL Delivery Bean Configurationset TransactionTimeOut to 300

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 95: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-94

6 Login in to Console JTA

7 Set the JTA timeout According to the below condition Make sure BPELEngineBean + BPELDeliveryBean is lt= JTA timeout(300+300lt=600)

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 96: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-95

8 Login in to EM console (httphostportem)SOA dminstrationBPEL

PropertiesMoreConfigpropeties Syncmax timeout Change the SyncmaxtimeOut to 200 secs

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 97: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-96

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 98: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-97

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 99: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-98

13 Integrating Oracle FLEXCUBE UBS and Scheduler Before deploying the Oracle FLEXCUBE UBS EAR file you need to carry out the following tasks

131 Running Backend Scripts

You need to compile certain tables pertaining to Scheduler in the schema to which the Application points The version of Quartz to be used is Latest Qualified Version

Follow the steps given below

1 Download Quartz Latest Qualified Versiongz file from the following URL httpwwwquartz-schedulerorgdownloaddownload-cataloghtml

1 Extract the gz file

2 Open the folder lsquoQuartz-Latest Qualified Version docsdbTablesrsquo folder and run lsquotables_oraclesqlrsquo (this is specific to Oracle Database) in the schema

For details on latest version of the software qualified with Oracle FLEXCUBE refer to the release certificate

14 Integrating Oracle FLEXCUBE UBS and BIP Reports You can integrate Oracle FLEXCUBE UBS and BIP reports The details are available in the chapter lsquoBIP Web Service Reportsrsquo

141 Deploying Application Through Application Serverrsquos Admin Console Deployment from Weblogic Administration Console

You can find the details pertaining to the deployment of Application using Weblogic Administration Console in the chapter lsquoDeploying Oracle FLEXCUBE Application on Weblogicrsquo

15 Integrating Oracle FLEXCUBE UBS and MBean In order to integrate Oracle FLEXCUBE UBS and MBean you need to follow the below steps before deploying the Oracle FLEXCUBE UBS EAR file created with MBean as a Plugin

151 Startup Script Modification

By default the TopLink used in MBean uses Oracle xml parser internally However Weblogic Server has to use JAXPlatform

To change the system property follow the steps given below

1 Go to the Weblogic domain home folder

c) Based on the operating system used open lsquostartWeblogiccmdrsquo or lsquostartWeblogicshrsquo from the folder lsquobinrsquo

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 100: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

1-99

d) Search for lsquoWLS_REDIRECT_LOGrsquo After lsquoJAVA_OPTIONSrsquo add the following code under lsquoifrsquo and lsquoelsersquo conditions

ldquo-Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatformrdquo

Now the details will look like this

if WLS_REDIRECT_LOG== (

echo Starting WLS with line

echo JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS PROXY_SETTINGS SERVER_CLASS

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS

) else (

echo Redirecting output from WLS window to WLS_REDIRECT_LOG

JAVA_HOMEbinjava JAVA_VM MEM_ARGS -DweblogicName=SERVER_NAME -Djavasecuritypolicy=WL_HOMEserverlibweblogicpolicy JAVA_OPTIONS -Dtoplinkxmlplatform=oracletoplinkplatformxmljaxpJAXPPlatform PROXY_SETTINGS SERVER_CLASS gtWLS_REDIRECT_LOG 2gtamp1

)

e) Restart the Weblogic server

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification
Page 101: Setting up Plug-Ins Oracle FLEXCUBE Universal Banking Release … · 2015-11-03 · Follow the steps given below: 1. Along with the Oracle FLEXCUBE UBS EAR file, the Installer creates

Setting up Plug - Ins [October] [2015] Version 121000 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway Goregaon (East) Mumbai Maharashtra 400 063 India Worldwide Inquiries Phone +91 22 6718 3000 Fax+91 22 6718 3001 wwworaclecomfinancialservices Copyright copy [2007] [2015] Oracle andor its affiliates All rights reserved Oracle and Java are registered trademarks of Oracle andor its affiliates Other names may be trademarks of their respective owners US GOVERNMENT END USERS Oracle programs including any operating system integrated software any programs installed on the hardware andor documentation delivered to US Government end users are commercial computer software pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such use duplication disclosure modification and adaptation of the programs including any operating system integrated software any programs installed on the hardware andor documentation shall be subject to license terms and license restrictions applicable to the programs No other rights are granted to the US Government This software or hardware is developed for general use in a variety of information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate failsafe backup redundancy and other measures to ensure its safe use Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws Except as expressly permitted in your license agreement or allowed by law you may not use copy reproduce translate broadcast modify license transmit distribute exhibit perform publish or display any part in any form or by any means Reverse engineering disassembly or decompilation of this software unless required by law for interoperability is prohibited The information contained herein is subject to change without notice and is not warranted to be error-free If you find any errors please report them to us in writing This software or hardware and documentation may provide access to or information on content products and services from third parties Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content products and services Oracle Corporation and its affiliates will not be responsible for any loss costs or damages incurred due to your access to or use of third-party content products or services

  • 1 Setting up Plug-Ins
    • 11 Introduction
    • 12 Integrating Oracle FLEXCUBE UBS and BPEL
      • 121 Custom Provider Configuration
      • 122 Configuring JPS
      • 123 Configuring Work Flow Identity
      • 124 Configuring Application Users and Policies
      • 125 Configuring CIS
      • 126 Configuring DBAdapter
      • 127 Configuring JMS Adapter
      • 128 Configuring FTP Adapter
      • 129 BIP Interactive reports configuration
      • 1210 BAM Report Configuration settings
      • 1211 IPM configuration to edit the document
      • 1212 Configuring Superviser Roles in EM
      • 1213 Email Driver Configuration
      • 1214 TimeOut Settings for BPEL
        • 13 Integrating Oracle FLEXCUBE UBS and Scheduler
          • 131 Running Backend Scripts
            • 14 Integrating Oracle FLEXCUBE UBS and BIP Reports
              • 141 Deploying Application Through Application Serverrsquos Admin Console
                • 15 Integrating Oracle FLEXCUBE UBS and MBean
                  • 151 Startup Script Modification