OIM 11G: Unregister Approval Workflow?

All,
The help for registerworkflows-mp.xml shows that the following operations are available:
1. register
2. enable
3. disable
and in the registerworkflows-mp.xml we have targets to match those along with
1. list-composites
2. help
So how do we un-register a workflow from OIM? I have few from the hit and trials of learning the approvals and have un-deployed the soa composites but the workflows are still lying there.
Thanks,
BB
Edited by: bbagaria on Mar 31, 2011 8:32 AM

Unregistering workflows is not supported right now.

Similar Messages

OIM 11g r2: SOA workflows for two level approval.

HI Experts,
I am using SOA workflows in OIM 11g r2. The requirement is to have a two level approval for a role (which provisions Oracle DBUM connector at present) : first for Manager and second for the Role owner.
I have created and deployed the composite with name AddAccessApproval but need to find how to use this for two level approval.
There is option for serial approval but how to pass it to Role owner.
Any help in this regard is appreciated.
Many Thanks,
Arvind

I've run into the same error with oim 11gr2 bp04:
<Mar 18, 2013 11:07:09 AM CDT> <Notice> <Stdout> <BEA-000000> <<Mar 18, 2013 11:07:09 AM CDT> <Error> <oracle.soa.services.identity>
<BEA-000000> <<oracle.tip.pc.services.identity.jps.AuthenticationServiceImpl.authenticateUser()> authentication FAILED>>
<Mar 18, 2013 11:07:09 AM CDT> <Notice> <Stdout> <BEA-000000> <<Mar 18, 2013 11:07:09 AM CDT> <Error> <oracle.soa.services.identity>
<BEA-000000> <<.> Identity Service Authentication failure.
Identity Service Authentication failure.
Either the user name or password is incorrect. Check the error stack and fix the cause of the error. Contact Oracle Support Services if error is not fixable.
ORABPEL-10528
Identity Service Authentication failure.
Identity Service Authentication failure.
Either the user name or password is incorrect. Check the error stack and fix the cause of the error. Contact Oracle Support Services if error is not fixable.
     at oracle.tip.pc.services.identity.jps.JpsProvider.authenticateUser(JpsProvider.java:2337)
Caused By: javax.security.auth.login.LoginException: [Security:090304]Authentication Failed: User SOAAdminPassword javax.security.auth.login.FailedLoginException:
[Security:090302]Authentication Failed: User SOAAdminPassword denied
     at oracle.security.jps.internal.jaas.module.authentication.JpsUserAuthenticationLoginModule.login(JpsUserAuthenticationLoginModule.java:71)
     ...Did you find what the issue is? I'm finding scant information about this user named "SOAAdminPassword" (who makes up these usernames :-/).

How to retrieve Request Form Data in OIM 11g for SOA workflows

Hi,
I have a business requirement wherein, I need to retrieve a field's value inside my SOA composite for further processing and decide on the Approver of the Request. Say for e.g. I'm having a field *"Country"* inside my Request Form, and what i need to do is, as soon as the request form is submitted, I need to retrieve the value for *"Country"* attribute inside my SOA Composite using Payload, and further process it. This scenerio is with respect to provision an application instance to a user.
Now, in a similar scenario, where I was trying to create a user of type *"Contractor"*, I had used Request Service Api to retrieve the Basic information of the userform submitted, and decide on approval. Fortunately, the basic data like, First Name, Last Name, Login etc was successfully being fetched from the Request and I was able to perform further operations.
Unfortunately, the same code which was working for Creation of a User, is not working when I'm trying to provision an application instance to the user.
Below is the code which worked fine for me to retrieve basic request data for user creation, and isn't working for provisioning application instance:
RequestService reqSvc = (RequestService)oimClient.getService(RequestService.class);
String reqId = ((oracle.xml.parser.v2.XMLElement)getVariableData("inputVariable", "payload", "/ns3:process/ns4:RequestID")).getText();
System.out.println("request ID: " reqId);+
Request req = reqSvc.getBasicRequestData(reqId);
List <RequestEntity> targetEntities = req.getTargetEntities();
System.out.println("targetEntities : " targetEntities);+
System.out.println("------------");
for (RequestEntity rea : targetEntities)
+{+
List <RequestEntityAttribute> attributes = rea.getEntityData();
for( oracle.iam.request.vo.RequestEntityAttribute attribute : attributes)
+{+
System.out.println("Attribute.getName() : " attribute.getName().toString());+
     if(attribute.getName().equals("User Manager"))
     +{+
beneficiaryManagerKey = attribute.getValue().toString();
     System.out.println("User Manager : " beneficiaryManagerKey);+
+}+
     e+lse if(attribute.getName().equals("User Login"))+
     +{+
userid = attribute.getValue().toString();
     System.out.println("User Login : " userid);+
+}+
+}+
+}+
Any pointers to this would be of a great help.
Regards

List <RequestEntity> targetEntities = req.getTargetEntities();
System.out.println("targetEntities : " + targetEntities);
System.out.println("------------");
The above piece of code retrieves the attributes and their values from the request form while creating a user, but not from the request form, which provisioning a resource to a user.
Regards,

Approval workflow timelines ..

Folks ,
I am new to OIM 11g and SOA workflow .
Can anyone help me estimate the time required to develop a simple 2 level request approval workflow for a RO.
Thanks

if you ask me for static two level approval .. the dev time for me would be 1 day I will say! :-) but this depends upon who is doing it ... but simple static 2 level approval is quite simple in soa.
-Bikash

OIM 11g high availability - is LDAP required for Weblogic credential store

Hi all,
Trying to understand whether we need an LDAP in an HA architecture with [OIM/SOA] - [OIM/SOA/Admin]?
The HA guide: http://docs.oracle.com/cd/E14571_01/core.1111/e10106/imha.htm#CDEFECJF
Does not mention this requirement, in fact it specifically says you only need an LDAP if: "only for LDAPSync-enabled Oracle Identity Manager installations and for Oracle Identity Manager installations that integrate with Oracle Access Manager. "
However I have seen mention of issues with viewing tasks in SOA from OIM:
How To : ORABPEL-30504: After Oim 11g Installation, Approval Tasks Cannot Be Read Through OIM Console
Stating then when using OIM, SOA and an isolated Admin server, you need to switch to a proper LDAP as a credential and policy store:
http://docs.oracle.com/cd/E17904_01/core.1111/e12036/net.htm#CIHIDJCC
"2.4 LDAP as Credential and Policy Store
With Oracle Fusion Middleware, you can use different types of credential and policy stores in a WebLogic domain. Domains can use stores based on XML files or on different types of LDAP providers. When a domain uses an LDAP store, all policy and credential data is kept and maintained in a centralized store. However, when using XML policy stores, the changes made on managed servers are not propagated to the Administration Server unless they use the same domain home.
An Oracle Fusion Middleware SOA Suite Enterprise Deployment Topology uses different domain homes for the Administration Server and the managed server as described in the Section 2.3, "Shared Storage and Recommended Directory Structure." Derived from this, and for integrity and consistency purposes, Oracle requires the use of an LDAP as policy and credential store in context of Oracle Fusion Middleware SOA Suite Enterprise Deployment Topology. To configure the Oracle Fusion Middleware SOA Suite Enterprise Deployment Topology with an LDAP as Credential and Policy store, follow the steps in Section 11.1, "Credential and Policy Store Configuration."
So which is it does anyone know?
Thanks,
Wayne.
Edited by: wblacklock on May 17, 2012 6:12 AM

Note that you can use the internal LDAP that comes with WebLogic, for your users and groups if you want.
When you have multiple domains, you have a problem with this set-up as the internal LDAP is coupled to
a specific domain. This means that users you created in one domain are not visible in the other. When using
a separate LDAP that contains the users. You can configure in each domain an authenticator that points
to the LDAP. In this way you can share to user accross multiple domains.
When you are planning to use one domain you can stick with the internal LDAP if you want.
An example set-up (that uses access manager not identity manager) can be found here: http://middlewaremagic.com/weblogic/?p=7819,
which might help you in how to proceed.

OIM 11g Approval Workflow Notification Configuration

Dear All,
Is there any documentation guide or tutorial or step by step guide about how to configure approval workflow notification in oim 11g?
In my case, a request must be approve by 3 (three) level of approver, "Requester Manager" --> "Application Business Owner" --> "Application Administrator". On each level, a notification need to be sent to the approver contains all information about the requester and the resource that requested.
How can i configure the notification since approval processes are in SOA composite and the development of the workflow is using JDeveloper?
Many Thanks for your help.

Hi
Please go through the link, You can configure notification any time based on you requirement. You have to get emails to whom you want to sent, just set this mail in a variable. Use this variable as to ,..
http://docs.oracle.com/cd/E23943_01/dev.1111/e10224/bp_notif.htm#BABEDFCC
Thanks,
Kuldeep

OIM 11g Approval Workflow Notification questions

Hello.
I am working with an OIM 11g approval workflow. The workflow will flow from one group to another, and if one user in each group approves it, it is approved. Because I assigned it to groups, the notifications are going to every user in each group.
Is it possible to send a notification to only a single user within a group, instead of everyone? Does auto claim do this?
Is it possible to send a different notification if the ApprovalTask is rejected versus approved?
Thanks.

If I understand correctly, you want to send the notification only to the user who has approved the request and not to all in the group. You can do it by NOT using the notification tab in the .task but by using EmailNotificationService after the .task in BPEL. There you can read the data from payload on who approved the request and can send the notification only to that user. Same way for rejects. You can configure that.
1. After your .task completion you can have a decision box which can check the value for 'outcome' and then direct it to appropriate path for appropriate notification.
or
2. Based on outcome you can set the template in a variable and then in the notificationservice use that variable.
-Bikash

Multi Level Approval Workflow in OIM 11g R2

Hi everyone,
I want to develope a two level approval workflow in OIM 11g R2.
When I intent to provisioning a resource or an entitlement, this workflow will be executed.
This workflow is two level (serial approval)
First approver is manager of user, second approver is a custom group.
Is there any sample workflow like this?
How can I develope this?
Thanks.
Best Regards.

Hi, you can find the same in oracle assets link.
Download the guide for 11GR2.
http://www.oracle.com/technetwork/middleware/id-mgmt/overview/workflow-development-1868162.7z
Thank you,
Shashi

OIM 11g Approval Workflow - Error

Hi All,
I have created a approval workflow (Operational) in OIM11g. Have deployed it as a soa-composite and registered with OIM. Till here everything went fine.
I have created an apporval policy, to assign to requests of a specific type of resource .
When the resource is requested, the approval workflows is gettign triggered,but the request goes to failed state.
I am getting any exceptions in the logs / on the console.
Has anyone encountered this kind of issue.
Vicky

vicky wrote:
Hi All,
I have created a approval workflow (Operational) in OIM11g. Have deployed it as a soa-composite and registered with OIM. Till here everything went fine.
I have created an apporval policy, to assign to requests of a specific type of resource .
When the resource is requested, the approval workflows is gettign triggered,but the request goes to failed state.
I am getting any exceptions in the logs / on the console.
Has anyone encountered this kind of issue.
VickyCheck your SOA server through the em and that should show you your request and the fault states and everything .. that should give you an idea on what is going wrong ...

OIM 11g - Approval workflows for disabled user accounts

Hi,
We have a scenario wherein a user will be created in OIM with a future start date resulting in a Disabled Untill Start Date user status. Once the user is created, we should let anyone submit a New Hire form for the user and the submitted form needs to be approved by the Manager. Once the Manager approves the form, the target accounts should get created with disabled status. These accounts should get enabled on the start date.
As submission of New Hire Form is not a straightforward process, we came up with the following design.
A dummy resource object corresponding to the New Hire Form will be created and can be requested for a newly hired person by anyone who has OIM access. An approval workflow will be configured for the New Hire Form Resource object and provisioning of target accounts will be based on Manager's approval for this resource object.
However the challenge that we see with this design is, it wasn't possible to place a request for New Hire Form dummy resource object for a disabled user. But the requirement is to complete the New Hire Form submission process befor the user becomes active.
How can these workflows be invoked for a disbaled user? Is there any other way to implement this requirement?
Any kind of help/guidance is greatly appreciated.
Thanks and Regards
Deepa

911709 wrote:
If I create a dummy resource, called "Group Membership" for example, and use this to show the groups that are available in AD, how can I have the request be routed to different approvers? For example, group cn=HR Users,cn=Users,dc=company,dc=com needs to be routed to HR for approval. Group cn=IT,cn=Users,dc=company,dc=com needs to be routed to IT for approval. How can I change the approvers dynamically?
Re: Spawning multiple approval tasks in parallel in OIM11g SOA Composite
You can have dynamic task assignment in BPEL; where you defne a variable in the task assignment and update the variable with the approver group name before triggering the task assignment task. Check BPEL docs for same.
If every group needs a different approver, and there are 5000 groups, can I make 5000 resources and use the built-in routing of approvals? Or, use the dummy resource approach and handle the management of the approvals in some other way.Just make one resource with one field attached to it which takes in the group name and handle approval in SOA by reading a lookup which has AD group to Approval Group mapping.
>
Thank you.-Bikash
Edited by: Bikash Bagaria on Feb 18, 2012 1:00 AM

OIM 11gR2 - Out-of-the-box Approval Workflows

Does anyone know of any good resources that describes the out-of-the-box approval/provisioning workflows of 11g R2? I have searched Google back and forth but found nothing. Some of the workflows are obvious by their name (such as default/BeneficiaryManagerApproval!1.0), but others are not so clear regarding their flows.
On that same note, can one of the out-of-the-box approval workflows be configured to route to an approval group instead of single users?
Thanks for your help!

Instead of searching for docs in google i guess reverse-engineering on your own will be the best way to understand the approval workflows. Navigate to OIM_HOME/server/workflows/composites. It will contain all the approval workflow zip files. Unzip the required one which you want to understand and there will be a .jws file in it. Now open that in jdeveloper and open AprrovalProcess.bpel and composite.xml. It will show how the approval routes and what are the business rules written, everything. It is the best way to understand the approval workflows.
In the same way u can make changes to the out-of-the-box approval workflows also. See this OBE tutorial to understand how you can assign the approval to a group
http://www.oracle.com/webfolder/technetwork/tutorials/obe/fmw/oim/oim_11g/Request_Workflow_for_Self_Registration/request_workflow_for_self_registration.htm
Also please try the approval workflow given in the developer's guide which covers most of the basics.
http://docs.oracle.com/cd/E27559_01/dev.1112/e27150/request.htm#CIHFBEFB

Sending email notifications in oim 11g approval flow dynamically

Hi,
I have 4 level approval workflow in oim 11g and developed custom composite to get all the approver ids and and assigning these ids into 4 variables.
And used these variables in my custom 4 level sequential workflow. This workflow is working fine. Now I need to update this composite to send email notifications to the approver. So updated code to retrieve email ids and to store them in 4 more vairables. I cannot send all emails at a time thru the code. I need to send email only to the corresponding approver only when the flow reaches to that particular level.
Subject and body will be same but the email address will vary.
Can you please let me know the step by step process to implement notifications to these many levels.
If you think, this is not correct approach (storing all email ids in variables and then sending notifications), please let me know correct approach.
Thanks,
Mary

The way to do it would be to put your human task inside a while loop. This while loop would set a variable to the approver's userid and would continue till all the four approve it. In your human task you need just one approver and that would be the variable which the while loop sets.
If you do it this way, then you can use the OOTB notification tab in the .task and select the 'Assignee' as the email notification receiver and you won't have to worry about getting the email ids as well.
As for the current approach which you have, that is of using the sequential approvers in the human task, I haven't tried it, but just try setting the notification tab in the .task to 'Assignee' and event 'On Assignment'. That should do it as well.
-Bikash

Approval process in OIM 11g

Hi All,
I am newbie to OIM. I have a requirement with 2 levels of approvals in OIM 11g.
*1st level:* In the first level the Approver will be selected by the user(self service) from the drop down present in the custom UI.
*2nd level:* For the 2nd level Approval the 1st level appover should have the ability to select the next approver from a drop down list. The 2nd level approvers belong to a particular group.
All the approvers should be stored in a lookup table in OIM. When a user raises a request the custom application should get the values from the lookup table and populate the drop down for 1st level approvers. 2nd level approvers sholud be populated in the drop down during the 1st level approval process.
can any one suggest me the steps to achieve this.
Thanks

Task assignment in SOA are done via human task assignment i.e. the .task component in BPEL. Now this task assignment can use various features to compute whom to assign the task to.
1. Static: This is when you specify the group name or the user name directly into the task.
2. Dynamic : This is when you assign the approver to be a variable and in your SOA workflow before task assignment you assign value to this variable.
3. External Routing: This is when you assign a java code inside the .task to do all the assignment and escalations. When using this you can have complex implementations done.
What I meant by looping is that you will need to call this .task two times, first time of the first approver and second time (if the first approves it) for the second approver. Thus when you are inside the loop you need to get the appropriate value from the payload (payload is sent from OIM to SOA when you submit/approve the request) and set it into the appropriate variable so that .task reads that variable and assigns the task to that person.
I would recommend going through the BPEL developers guide for better understanding. Start with a simple process and see how it behaves when it runs and then pile on top of it.
-Bikash

OIM 11g, Get users from table and insert them into Approval Task

Hi All,
I have OIM 11.1.1.5.4 in Solaris 10 and I have an Oracle Table configured as Trusted Source.
I am using Database_App_Tables_9.1.0.5.0 connector.
I want Reconciliate new users from a Oracle Table as follow:
1. I ran the scheduled job
2. The new users reconciled Must get into an Approval Task before of insert them into USR Table.
3. The Administrator User Approved o Rejected the new users.
4. The new users that were approval Must insert them into USR Table.
Is there any form of implement this?, Can you guide me please?.
Thanks for your Help.

Through your Schedule Task, generate "*Create User*" (Request Type) request and assign approval workflow for such requests.
After completion of approval ONLY, users will get created into OIM 11g.

OIM 11g Approval - Infrastructer details

Folks,
I would be writing and deploying approval workflows in OIM 11g.
Please guide me what all i need to set up before starting the develpoment .
I mean what all softwares i need , any links etc would be helpful .
I have OIM and SOA server installed and up .
Regards
Sid

jdev is required, SoA composite editor
follow below link
http://www.oracle.com/webfolder/technetwork/tutorials/obe/fmw/oim/oim_11g/developing_oim_custom_approval_process_for_self_registration/developing_oim_custom_approval_process_for_self_registration.pdf
--nayan

OIM 11G: Unregister Approval Workflow?

Similar Messages

Maybe you are looking for