Summary

Focused on bridging the “DB-level understanding” of IT Shop structures with a supported object-layer path found on the sandbox host (OIM SDK ScriptSamples), plus adding two vendor doc web-page citations that match the DB observations (IT Shop option + service item prerequisite; enable via QER | ITSHOP + compile database).

Sandbox DB evidence (SELECT-only)

Confirmed current IT Shop subtree codes in this sandbox: SH, BO, PR, CU (no SC nodes present in live data).
Re-confirmed config parameter presence and state:
DialogConfigParm.FullPath='QER\\ITShop\\AutoPublish\\ADSGroup' exists and is disabled; description notes “Changes … require recompiling the database.”

No new sandbox-db evidence file was created; this run re-used the existing evidence set (see project README).

Sandbox host evidence (WinRM, read-only)

WinRM HTTPS (5986) failed from this workstation, but WinRM HTTP (5985) succeeded for read-only inspection.

New host evidence note:

projects/identity-management/oim-kb-update/sandbox-host/2026-04-27-sdk-scripts-itshoporg.md

Key shipped sources referenced:

C:\\Dev\\OneIdentityManager.10.0\\Modules\\QBM\\dvd\\AddOn\\SDK\\ScriptSamples\\08 ITShop\\01 Create ITShop.vb
C:\\Dev\\OneIdentityManager.10.0\\Modules\\QBM\\dvd\\AddOn\\SDK\\ScriptSamples\\08 ITShop\\03 Remove ITShop.vb

Docs (web)

Added two additional vendor-doc links (web pages) to the KB note:

projects/identity-management/knowledge-base/oim-it-shop-structure-and-availability.md

Open follow-ups

Locate the SDK’s referenced JobChainSamples for end-to-end supported process wiring.
Look for shipped samples (SDK/MDK) that cover “publish entitlement as product on shelf” (beyond shop/customer-node creation).