Batch/Scheduled tasks

Using batch tasks provides the ability to support various business logic operations, such as sending notifications, generating custom reports, and performing other periodic routine tasks. OpenIAM provides a set of out-of-the-box batch tasks; some can be customized via Groovy scripts, while others should remain as delivered. This section describes the most frequently used batch tasks provided in OpenIAM.

As of v2026.5.2, batch tasks run in a dedicated microservice, batch-task-manager, with its own JVM, its own resource budget, and its own database (batchtasks) — they no longer share heap with openiam-esb. Customer Groovy scripts that previously imported from org.openiam.esb.core.batch.tasks.* must be updated to org.openiam.batch.manager.initializer.* (and org.openiam.batch.manager.domain.BatchTaskEntity in place of org.openiam.esb.domain.BatchTaskEntity). See New in v2026.5.2 for the full package-move list and upgrade steps.

Running a shell script with a batch task

If running a shell script is required, you can use the following code reference:

ProcessBuilder processBuilder = new ProcessBuilder()

println "parameter_1: " + parameter_1
println "parameter_2: " + parameter_2

processBuilder.command("bash", "-c", 
    "sh /tmp/script.sh ${parameter_1} ${parameter_2}")

try {
    Process process = processBuilder.start()
    BufferedReader reader = new BufferedReader(
        new InputStreamReader(process.getInputStream()))
    StringBuilder output = new StringBuilder()
    String line
    while ((line = reader.readLine()) != null) {
        output.append(line)
    }
    println("Script output:" + output)
} catch (IOException e) {
    e.printStackTrace()
} catch (InterruptedException e) {
    e.printStackTrace()
}

Due to security reasons, the java.io package is not whitelisted for imports (you cannot directly instantiate classes from this package in Groovy). To resolve this, add the following property...

-Dorg.openiam.groovy.extra.whitelist.package=java.io

... to the configuration files for Groovy Manager and ESB as follows.

For Docker, modify the following.

_openiam-docker-compose/3.2/services/docker-compose.yaml_

For RPM, modify the following.

/etc/systemd/system/openiam-groovy.service
/etc/systemd/system/openiam-esb.service

For example, for RPM:

ExecStart=/usr/local/openiam/services/start.sh groovy-manager "-Xmx512m -Djdk.tls.client.protocols=TLSv1.2 
-Dorg.openiam.groovy.extra.whitelist.package=java.io"

Out-of-the-box tasks