Wednesday, November 11, 2009

Identity service cannot get roles in realm "{0}". BPEL identity service fails

We had problems while invoking the service getGrantees on /integration/services/IdentityService/identity.

Identity service cannot get roles in realm "{0}".
Error occurs while getting roles in realm "[REALM]".
Check the error stack and fix the cause of the error. Contact oracle support if error is not fixable.

After we did a new configure on both instances in the cluster:
./ orcladmin [password] [port] false [realm] seedRequiredUsers oc4jadmin [password] oc4j_soa

And we checked the differences between the $ORACLE_HOME/j2ee/oc4j_soa/config/system-jazn-data.xml and $ORACLE_HOME/j2ee/home/config/system-jazn-data.xml. And changed some of the lines.

Another reason can be that the jazn.xml in the $ORACLE_HOME/j2ee/oc4j_soa/config/jazn.xml is not correct. This file should automaticaly be changed by changing the security provider in em, sometimes this fails. You can change the security provider to the original value and after that back to the OID in em and look in $ORACLE_HOME/j2ee/home/config/jazn.xml. The contents should be changed with the correct values for your OID.

Everything worked again.

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.


  1. Another reason for this is a missing 'bpeladmin' user. For instance when setting up an LDAP provider, this user needs to be created and assigned to a bunch of groups: BPMSystemAdmin, BPELfilterADMIN, OC4J Application Administrators, Rule Administrators, BPMWorkflowAdmin, BPMDefaultDomainAdmin, OC4J administrators

  2. I really like your posts as they are very information. This is another addition to your good work.This post is about identity service and its role. I think it will be better understood if given with example and coding.

  3. "And we checked the differences between the $ORACLE_HOME/j2ee/oc4j_soa/config/system-jazn-data.xml and $ORACLE_HOME/j2ee/home/config/system-jazn-data.xml. And changed some of the lines."

    Can you please provide the lines which got changed.