Certification Admin Cannot Sign Off On Certification On Behalf Of Disabled Users with Errors "ADF_FACES-60096" and "Withdrawal of workflow failed with the exception" (Doc ID 2107225.1)

Last updated on MARCH 08, 2017

Applies to:

Identity Manager - Version 11.1.2.1.0 to 11.1.2.3.0 [Release 11g]
Information in this document applies to any platform.

Symptoms

When a Certification Admin (or other user) accesses a certification for a Certifier who has been disabled, the Certification Admin is able to act upon the contents of the certification, but they're not able to sign-off.

There is a popup displayed on the page with:
Message from webpage
For more information, search the server's error log for an entry containing this key: #1455542683716
ADF_FACES-60097:For more information, please see the server's error log for an entry beginning with: ADF_FACES-60096: Server Exception during PPR, #36

 The OIM managed servers' diagnostic log shows the following ecid related entries for the ADF_FACES-60096 ERROR:

[2016-01-01T01:00:27.157-06:00] [oim_server1] [ERROR] [] [oracle.iam.platform.workflowservice] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: CertAdmin1] [ecid: ecid456xyz] [APP: oim#11.1.2.0.0] [DSID: dsid123] Withdrawal of workflow failed with the exception
[2016-01-01T01:00:27.170-06:00] [oim_server1] [WARNING] [] [oracle.iam.certification.soa] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: CertAdmin1] [ecid: ecid456xyz] [APP: oim#11.1.2.0.0] [DSID: dsid123] Caught exception during workflow services invocation.[[
oracle.iam.platform.workflowservice.exception.IAMWorkflowException: Withdrawal of workflow failed with the exception
at oracle.iam.platform.workflowservice.impl.BPELProvider.updateTask(BPELProvider.java:203)
at oracle.iam.certification.soa.CertificationTaskServiceImpl.updateCertificationSignOff(CertificationTaskServiceImpl.java:139)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
....
]]
[2016-01-01T01:00:27.176-06:00] [oim_server1] [WARNING] [] [oracle.iam.certification.impl] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: CertAdmin1] [ecid: ecid456xyz] [APP: oim#11.1.2.0.0] [DSID: dsid123] Server exception #1455542683716.[[
oracle.iam.certification.exception.CertificationWorkflowException: Error signing-off workflow task taskUid taskID1234 for assignee Certifier1.
at oracle.iam.certification.soa.CertificationTaskServiceImpl.updateCertificationSignOff(CertificationTaskServiceImpl.java:145)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
....
]]
[2016-01-01T01:00:27.203-06:00] [oim_server1] [ERROR] [ADFC-50016] [oracle.adfinternal.controller.application.AdfcExceptionHandler] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: CertAdmin1] [ecid: ecid456xyz] [APP: oracle.iam.console.identity.self-service.ear] [DSID: dsid123] ADFc: While handling an exception the application's exception handler threw a new exception.[[
javax.faces.el.EvaluationException: oracle.iam.certification.exception.CertificationEngineException: For more information, search the server's error log for an entry containing this key: #1455542683716.
at org.apache.myfaces.trinidadinternal.taglib.util.MethodExpressionMethodBinding.invoke(MethodExpressionMethodBinding.java:58)
...
Caused by: oracle.iam.certification.exception.CertificationEngineException: For more information, search the server's error log for an entry containing this key: #1455542683716.
at oracle.iam.certification.impl.CertificationUtil.logAndConstructServerException(CertificationUtil.java:1675)
at oracle.iam.certification.impl.CertificationServiceImpl.completeCertification(CertificationServiceImpl.java:283)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
....
]]
[2016-01-01T01:00:27.207-06:00] [oim_server1] [ERROR] [ADFC-50017] [oracle.adfinternal.controller.application.AdfcExceptionHandler] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: CertAdmin1] [ecid: ecid456xyz] [APP: oracle.iam.console.identity.self-service.ear] [DSID: dsid123] ADFc: While attempting to handle this exception the application's exception handler failed.[[
javax.faces.el.EvaluationException: oracle.iam.certification.exception.CertificationEngineException: For more information, search the server's error log for an entry containing this key: #1455542683716.
at org.apache.myfaces.trinidadinternal.taglib.util.MethodExpressionMethodBinding.invoke(MethodExpressionMethodBinding.java:58)
at org.apache.myfaces.trinidad.component.UIXComponentBase.broadcastToMethodBinding(UIXComponentBase.java:1490)
...
Caused by: oracle.iam.certification.exception.CertificationEngineException: For more information, search the server's error log for an entry containing this key: #1455542683716.
at oracle.iam.certification.impl.CertificationUtil.logAndConstructServerException(CertificationUtil.java:1675)
at oracle.iam.certification.impl.CertificationServiceImpl.completeCertification(CertificationServiceImpl.java:283)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
...
]]
[2016-01-01T01:00:27.209-06:00] [oim_server1] [WARNING] [] [oracle.adfinternal.view.faces.lifecycle.LifecycleImpl] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: CertAdmin1] [ecid: ecid456xyz] [APP: oracle.iam.console.identity.self-service.ear] [DSID: dsid123] ADF_FACES-60098:Faces lifecycle receives unhandled exceptions in phase INVOKE_APPLICATION 5[[
javax.faces.el.EvaluationException: oracle.iam.certification.exception.CertificationEngineException: For more information, search the server's error log for an entry containing this key: #1455542683716.
at org.apache.myfaces.trinidadinternal.taglib.util.MethodExpressionMethodBinding.invoke(MethodExpressionMethodBinding.java:58)
at org.apache.myfaces.trinidad.component.UIXComponentBase.broadcastToMethodBinding(UIXComponentBase.java:1490)
....
Caused by: oracle.iam.certification.exception.CertificationEngineException: For more information, search the server's error log for an entry containing this key: #1455542683716.
at oracle.iam.certification.impl.CertificationUtil.logAndConstructServerException(CertificationUtil.java:1675)
at oracle.iam.certification.impl.CertificationServiceImpl.completeCertification(CertificationServiceImpl.java:283)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
....
]]
[2016-01-01T01:00:27.227-06:00] [oim_server1] [ERROR] [] [oracle.adfinternal.view.faces.config.rich.RegistrationConfigurator] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: CertAdmin1] [ecid: ecid456xyz] [APP: oracle.iam.console.identity.self-service.ear] [DSID: dsid123] ADF_FACES-60096:Server Exception during PPR, #36[[
javax.servlet.ServletException: For more information, search the server's error log for an entry containing this key: #1455542683716.
at javax.faces.webapp.FacesServlet.service(FacesServlet.java:277)
at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
...
Caused by: oracle.iam.certification.exception.CertificationEngineException: For more information, search the server's error log for an entry containing this key: #1455542683716.
at oracle.iam.certification.impl.CertificationUtil.logAndConstructServerException(CertificationUtil.java:1675)
at oracle.iam.certification.impl.CertificationServiceImpl.completeCertification(CertificationServiceImpl.java:283)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
...
]]

Where we see an oracle.iam.platform.workflowservice ERROR with "Withdrawal of workflow failed with the exception" followed by an oracle.iam.certification.soa WARNING with the following relevant threads:

"oracle.iam.platform.workflowservice.exception.IAMWorkflowException: Withdrawal of workflow failed with the exception
at oracle.iam.platform.workflowservice.impl.BPELProvider.updateTask(BPELProvider.java:203)
at oracle.iam.certification.soa.CertificationTaskServiceImpl.updateCertificationSignOff(CertificationTaskServiceImpl.java:139)..."

The corresponding SOA managed server log file shows a generic ORABPEL-30511 error with ORABPEL-10509, noting that the disabled Certifier (not the Certification Admin) cannot be found in the identity store.

<Jan 1, 2016 1:00:27 AM CST> <Error> <oracle.soa.services.workflow.query> <BEA-000000> <<.> Verification Service cannot resolve user identity.
User Certifier1 cannot be found in the identity repository.
Workflow Context token cannot be null in request.

ORABPEL-30511

Verification Service cannot resolve user identity.
User Certifier1 cannot be found in the identity repository.
Workflow Context token cannot be null in request.

at oracle.bpel.services.workflow.verification.impl.LocalCacheManager.lookupUser(LocalCacheManager.java:600)
at oracle.bpel.services.workflow.verification.impl.LocalCacheManager.getBPMUserFromUserMap(LocalCacheManager.java:547)
at oracle.bpel.services.workflow.verification.impl.VerificationService.createWorkflowContext(VerificationService.java:1276)
...
Caused By: ORABPEL-10509

User not found.
User "Certifier1" is not found in configuration "jazn.com"
Check if the user exists in the repository specified by the configurations. Check the error stack and fix the cause of the error. Contact Oracle Support Services if error is not fixable.

at oracle.tip.pc.services.identity.jps.JpsProvider.lookupUser(JpsProvider.java:910)
at oracle.tip.pc.services.identity.jps.AuthorizationServiceImpl.lookupUser(AuthorizationServiceImpl.java:257)
at oracle.tip.pc.services.identity.jps.IdentityServiceImpl.lookupUser(IdentityServiceImpl.java:183)
...
Caused By: oracle.security.idm.ObjectNotFoundException: No users found matching the criteria.
at oracle.iam.userrole.providers.oimdb.OIMDBSimpleUserSearchResponse.<init>(OIMDBSimpleUserSearchResponse.java:64)
at oracle.iam.userrole.providers.oimdb.OIMDBSimpleUserSearchResponse.<init>(OIMDBSimpleUserSearchResponse.java:70)
at oracle.iam.userrole.providers.oimdb.OIMDBIdentityStore.searchUsers(OIMDBIdentityStore.java:460)
...
>
<Jan 1, 2016 1:00:27 AM CST> <Error> <oracle.soa.services.workflow.common> <BEA-000000> <<.>
ORABPEL-0

at oracle.bpel.services.workflow.verification.impl.VerificationService.createWorkflowContext(VerificationService.java:1319)
at oracle.bpel.services.workflow.verification.impl.VerificationService.getWorkflowContext(VerificationService.java:1234)
at oracle.bpel.services.workflow.verification.impl.VerificationService.getWorkflowContext(VerificationService.java:1195)
at oracle.bpel.services.workflow.verification.impl.VerificationService.authenticateUser(VerificationService.java:1091)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
...
Caused By: ORABPEL-30511

Verification Service cannot resolve user identity.
User Certifier1 cannot be found in the identity repository.
Workflow Context token cannot be null in request.

at oracle.bpel.services.workflow.verification.impl.LocalCacheManager.lookupUser(LocalCacheManager.java:600)
at oracle.bpel.services.workflow.verification.impl.LocalCacheManager.getBPMUserFromUserMap(LocalCacheManager.java:547)
at oracle.bpel.services.workflow.verification.impl.VerificationService.createWorkflowContext(VerificationService.java:1276)
at oracle.bpel.services.workflow.verification.impl.VerificationService.getWorkflowContext(VerificationService.java:1234)
...
Caused By: ORABPEL-10509

User not found.
User "Certifier1" is not found in configuration "jazn.com"
Check if the user exists in the repository specified by the configurations. Check the error stack and fix the cause of the error. Contact Oracle Support Services if error is not fixable.

at oracle.tip.pc.services.identity.jps.JpsProvider.lookupUser(JpsProvider.java:910)
at oracle.tip.pc.services.identity.jps.AuthorizationServiceImpl.lookupUser(AuthorizationServiceImpl.java:257)
at oracle.tip.pc.services.identity.jps.IdentityServiceImpl.lookupUser(IdentityServiceImpl.java:183)
at oracle.bpel.services.workflow.verification.impl.LocalCacheManager.lookupUser(LocalCacheManager.java:596)
...
Caused By: oracle.security.idm.ObjectNotFoundException: No users found matching the criteria.
at oracle.iam.userrole.providers.oimdb.OIMDBSimpleUserSearchResponse.<init>(OIMDBSimpleUserSearchResponse.java:64)
at oracle.iam.userrole.providers.oimdb.OIMDBSimpleUserSearchResponse.<init>(OIMDBSimpleUserSearchResponse.java:70)
at oracle.iam.userrole.providers.oimdb.OIMDBIdentityStore.searchUsers(OIMDBIdentityStore.java:460)
at oracle.tip.pc.services.identity.jps.JpsProvider.lookupUser(JpsProvider.java:894)
...
>
<Jan 1, 2016 1:00:27 AM CST> <Error> <oracle.soa.services.workflow.common> <BEA-000000> <<.>
ORABPEL-0

at oracle.bpel.services.workflow.verification.impl.VerificationService.getWorkflowContext(VerificationService.java:1240)
at oracle.bpel.services.workflow.verification.impl.VerificationService.getWorkflowContext(VerificationService.java:1195)
at oracle.bpel.services.workflow.verification.impl.VerificationService.authenticateUser(VerificationService.java:1091)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
...
Caused By: ORABPEL-0

at oracle.bpel.services.workflow.verification.impl.VerificationService.createWorkflowContext(VerificationService.java:1319)
at oracle.bpel.services.workflow.verification.impl.VerificationService.getWorkflowContext(VerificationService.java:1234)
at oracle.bpel.services.workflow.verification.impl.VerificationService.getWorkflowContext(VerificationService.java:1195)
at oracle.bpel.services.workflow.verification.impl.VerificationService.authenticateUser(VerificationService.java:1091)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
...
Caused By: ORABPEL-30511

Verification Service cannot resolve user identity.
User Certifier1 cannot be found in the identity repository.
Workflow Context token cannot be null in request.

at oracle.bpel.services.workflow.verification.impl.LocalCacheManager.lookupUser(LocalCacheManager.java:600)
at oracle.bpel.services.workflow.verification.impl.LocalCacheManager.getBPMUserFromUserMap(LocalCacheManager.java:547)
at oracle.bpel.services.workflow.verification.impl.VerificationService.createWorkflowContext(VerificationService.java:1276)
at oracle.bpel.services.workflow.verification.impl.VerificationService.getWorkflowContext(VerificationService.java:1234)
at oracle.bpel.services.workflow.verification.impl.VerificationService.getWorkflowContext(VerificationService.java:1195)
at oracle.bpel.services.workflow.verification.impl.VerificationService.authenticateUser(VerificationService.java:1091)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
...
Caused By: ORABPEL-10509

User not found.
User "Certifier1" is not found in configuration "jazn.com"
Check if the user exists in the repository specified by the configurations. Check the error stack and fix the cause of the error. Contact Oracle Support Services if error is not fixable.

at oracle.tip.pc.services.identity.jps.JpsProvider.lookupUser(JpsProvider.java:910)
at oracle.tip.pc.services.identity.jps.AuthorizationServiceImpl.lookupUser(AuthorizationServiceImpl.java:257)
at oracle.tip.pc.services.identity.jps.IdentityServiceImpl.lookupUser(IdentityServiceImpl.java:183)
at oracle.bpel.services.workflow.verification.impl.LocalCacheManager.lookupUser(LocalCacheManager.java:596)
at oracle.bpel.services.workflow.verification.impl.LocalCacheManager.getBPMUserFromUserMap(LocalCacheManager.java:547)
...
Caused By: oracle.security.idm.ObjectNotFoundException: No users found matching the criteria.
at oracle.iam.userrole.providers.oimdb.OIMDBSimpleUserSearchResponse.<init>(OIMDBSimpleUserSearchResponse.java:64)
at oracle.iam.userrole.providers.oimdb.OIMDBSimpleUserSearchResponse.<init>(OIMDBSimpleUserSearchResponse.java:70)
at oracle.iam.userrole.providers.oimdb.OIMDBIdentityStore.searchUsers(OIMDBIdentityStore.java:460)
...
>

 

 

Changes

 The issue occurs when another user  (ie..Certifier Admin) attempts to complete a certification for a certifier who has been disabled/deleted in the environment.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms