Wierd Issue In Approval Policy OIM 11.1.1.5.0 BP03

Folks,
We are facing a very weird issue in our dev env . We have developed approval workflow for Assign role request type .
Here's what we have done .
- Template level is auto -approved (via checkbox)
- Request level approval policy (No rules) is created and is auto - approve (tried with both via check box and defaultAutoApproval SoA composite)
- Operational level policy (Rule = Role Name = ABC) is created and SOA composite is assgined .
Now, whenever we raise a request , request level approval is never auto approved , intead the approval task is assigned to xelsysadm always ???
Any clues ??
Thanks
Sid

Hi,
As you said there is no rule created for request level approval policy if so, default policy gets evaluated for request level and hence default approval process gets triggered.
to suppress this default approval policy and approval process to trigger, you need to create rules for your request level policy and make it auto approval.
Regards,
Raghav.

Similar Messages

How to pass the value from DB in Approval Policy Rule OIM 11g R2

Hi,
I need to get the value of rule condition in Approval policy from DB.
Please let me know how to achieve this. I am using OIM 11g R2.
Thanks

How to passing the textbox value within the jsp page
without using javascript or reload the page.No, jsp executes on the remoter server, the text box is on a client machine, you need to send information to the server over the network, http does this with a request, which will reload the page.....................

Error in creating approval policy in OIM 11g

hi...
i am trying to create approval policy in OIM 11g. But after giving the details for first step, it gives the following error-
"Approval policy validation failed with oracle.iam.request.exception. ApprovalPolicyServiceException:An error occured while searching request model <policy name>"
Please let me know the coz of this error and the way to resolve it.

If you are using JDeveloper , can you able to get class after giving "." .If yes no than it is the problem with the jar file you are using .Check whether you can able to import oracle.iam.authzpolicydefn.api.Feature.
Thanks ,
Animesh anand

Approval process oim 11g

Hi,
I am creating a approval process.
I have two question....
1. how to populate few field from requester's user defination to process template?
2. All my requests are going to xelsysadm for approval. how to stop that?

1. Didn't understand your question. Do you want to populate few fields on Request Dataset
If yes then use Prepopulate Adapter.
2. Create Approval Policy for your Custom Approval Workflow
http://www.oracle.com/webfolder/technetwork/tutorials/obe/fmw/oim/oim_11g/Request_Workflow_for_Self_Registration/request_workflow_for_self_registration.htm

Issues with Approval Task IN IDM 7.1

Hi,
I have been facing issues with Approval task.
Firstly,
I have created an Approval task with 'Mskeyvalue' and 'Mxref_mx_privilege' as attributes.
I am having a problem in the Approvers workflow UI where, we see these approvals.
It not only displays the requested privilege,but also the already provisioned privileges of the enduser to the approver.
He will not be able to recognize which privilege has been requested.
Is this an already known issue which has been sorted out in recently updated patches?
If not can you suggest me a solution for this.
Secondly,
The privilege requested by the end-user is getting provisioned to the backend,even before it is Approved.
Since Provisioning tasks are mapped through repository,privileges are getting provisioned as soon as
an entry is made into the Identity Stores.
But,Ideally the requested privilege should not be proviosioned to the backend until it is approved by the Approver.
Is this an already known isuue which has been sorted out in recently updated patches?
If not can you suggest me a solution for this.
Thanks and Regards,
Joel
Edited by: Joel Sundararajan Davis on Jul 16, 2009 11:04 AM

Joel,
I'm afraid the approval process is not quite this simple. You are correct, if you have provisioning setup on the repository for a privilege it will be assigned immediately. The approval task as you are using it works as an 'interrupt' to a process - nothing more.
There is an entry type called pending value that you would need to leverage in order to have privileges requested route for approval. This pending value object is created by default for role requests in 7.1, but I'm not sure how to create a pending value for a privilege.
Which brings to mind a question - is there a reason you want users to request privileges instead of roles? In general I think the security model is setup so that users are assigned roles which contain one or more privileges.
If you do choose to use a role instead of privilege, simply set the attribute MX_APPROVAL_TASK to the id of the approval task you want to use and the system will do the rest. The display you referenced in the first part of your question will always display the current values of the attributes you select for the user, so don't try to display the roles there - just display the user id, name, whatever else is helpful and when the approver clicks on the user id they will get the approval details which will include the requested role.
Also, please note that if you would like to assign a role directly anywhere (bypass approvals) you can use the switch: {direct_reference=1}
-Geoff

Multi-Approval in OIM!

hi all,
how do i do multi-approval in OIM? if i get a list of approvers dynamically from an external resource say a db (using an adapter), how do i generate MULTI-OR approvals and also MULTI-AND approvals.
also, can one process in OIM call another process? is there a SUB-PROCESS concept?
vik

Hi Vik
AND:
Craete two tasks in Approval workflow App1 and App2. App1 will be non-conditional and App2 will be conditional and App2 will be dependent on App1.
In the responses tab of App1, select Approve and below in Task to Generate tab you have to select task App2.
It's multilevel approval workflow.

Approval Policies OIM 11g

Folks ,
Just wanted to understand , in what scenario we need to create operational level of approval policies .
My requirement is develop approval workflow for roles assignement , it involves 3 levels of approval, starting with manger approval and bulk request submission is also possible .
then i should have my SOA composite assigned to approval policy defined for operational level , right ? I cant use request level and template level approval policies ??
Thnx

Folks ,
Just wanted to understand , in what scenario we need to create operational level of approval policies .
My requirement is develop approval workflow for roles assignement , it involves 3 levels of approval, starting with manger approval and bulk request submission is also possible .
then i should have my SOA composite assigned to approval policy defined for operational level , right ? I cant use request level and template level approval policies ??
Thnx
Hi,
You can create 1 composite that defines approvals.
Then you can create 2 policy.
One of them is request level policy, the other one is operation level policy.
Request level policy has:
Auto Approval : yes
Rule : Request.Request Type Equals Role Assignment(like this).
All Scope : no
Operation level policy has :
Auto Approval : no
Approval Process : your composite
All Scope : yes
Regards.

Wierd issues with creative champion pcie

hi,
i just spent a few bucks on this awesome new soundcard and i've had nothing but problems after i bought it, it worked the first day after 3 driver reinstalls and by using windows update i finaly got it working! but the problems are not finished, i have cracking sounds and noises all the time when i play games and hear music, sometimes the music levels drop so it sound like music phases out, i dont have these problems with my stock motherboard sound, i also turned off the feedback thing for mic so it wont interfer with my speakers, so i have no idea what im doing wrong, i've tried disabling the stock soundcard (supremexfi) in bios and removed it completely and it didnt fix it the issues at all, i also pushed the cables from card to the I/O as hard as possible without breaking anything and i have the same issues without any changes, so im completely lost now on what to do
if anyone got some suggestion it would be great, or else i have to return this card and get my money back, because this isent what i paid for..
system:
Windows 7 home premium 64bit
4gb ram, 066mhz corsair dominator
asus rampage formula
intel QX6700
ATI sapphire vapor x 5870
X-Fi Titanium Fatalty Champion PCIe(with 2.7.7 driver)

,Re: wierd issues with creative champion pcieRsometimes it can be a bit bugged(in rare occasions noises) and i have to change from gaming mode to entertainment to fix that, and if i play any old title games it seems that sounds crackle all the time and i gotta do a full reboot to fix it.
so i really rounded up what to do and what to prevent(this happens with all drivers and its even worse with the newer ones so im using the very WHQL drivers from windows update)
looks like a RMA soon!
i appreciate the help! but not sure if i wanna make so many adjustments just to get some soundcard working.. just seem too much work for something i bought just to enjoy, sadly enough
creative: useless drivers, either fire the whole department or merge with asus is the only solution i can really predict would be a good change

Typical issue while approving workitems from SBWP.

Hello All,
I have an issue while approving workitems massivley from SBWP. I think we can approve bunch of workitems which corresponds to a single task at once.
But for me iam not able to approve all the related workitems at once. When i select and try approve , it asks me to approve one at a time ( i get screen by screen) . Where some are able to approve at once, i verified my user settings with them and every thing seems to be normal ( Parametes of SU01D).
What could be the reason, please suggest.Its very important for me.
Regards
Mahesh.

Hi,
Sometimes mass approvals are needed. At my client there is a rule that ALL refunds need to be approved by a person - they cannot go out automatically.
So we allow multiple (small-value) refunds to be selected by one user and approved en-masse. It works quite well in SBWP.
As for the problem being discussed, if it works for one user, it should work for all. Are there differences in authorizations between the users?
cheers
Paul

OIM 11.1.1.5.0 + BP03 Integration with BI Publisher 11.1.1.5.0

Folks,
Has anyone been successful in integrating BIP 11.1.1.5.0 with OIM 11g? I have recently integrated BIP 11g with OIM11g for reporting. After doing all the necessary configurations as mentioned in the OIM 11g developers guide and BP03 read me document, I am able to see the reports structure in BIP. Also I could execute few of the reports like Access Policy details, Role membership etc. .
But none of the user reports are working. It always shows up a blank screen and no activity in logs either. I’m pretty sure that I have configured that BIP user properly and he has all the rights to execute the reports, in fact I have assigned all the available functional roles to the BIP user.
Has anyone of you faced such an issue earlier?
Appreciate your support!
Thanks
Sid

Hi Sidharth,
Instaed of BIP 11.1.1.5.0, go for BIP 10g, as it is certified with OIM 11.1.1.5. We integrated BIP 10g successfully.
Hope this helps
BI Publisher 11g Integration with OIM 11.1.1.5.0 + BP03
Regards
Kumar

Operation Level Approval Policy Creation Issue in OIM11gR2

Hi Experts
I have successfully registered approval process without any issues but while creating Operation Level Policy I have referred the approval process which I have registered before. While clicking Finish button I’m getting below exception in sysadmin console itself.
Auto registration of approval process “default/aaa!1.0 <approval process name>” failed while creating policy “XXX” Register the approval process manually.
Have anyone faced this issue before ? Is anything I have missed in registering approval process?
Please help me to fix this issue...
Edited by: Vaitheeswaran Balakumar on Jan 2, 2013 1:22 AM
Edited by: Vaitheeswaran Balakumar on Jan 2, 2013 4:23 AM

Hi,
But the question is: If it works for Level-1 approver, Why is it not working for Level-2 approver?
Regards,
Jubish

Issue with request approval in OIM 11gR2

HI,
I have created an workflow so that when ever a user tries to provision an entitlement to a user then request should go the approver. Now whenever the request has been raised , workflow has been triggered and the approver approves the requet and the status of the request changes to approve. But even then the entitlement is not getting provisioned to the user. I am getting the below logs :
<Mar 20, 2013 5:10:09 AM PDT> <Error> <oracle.soa.bpel.engine.delivery> <BEA-000000> <Error: Fault not handled.
failure to handle a fault thrown from a scope, by any blocks in the scope chain.
This exception occurred because the fault thrown in the BPEL flow was not handled by any fault handlers and reached the top-level scope.
A top-level fault handler should be added to the flow to handle faults not caught from within the flow.
happened for conv_id = urn:E6A7D570915611E2BFA2613558FA7D90 and message guid = urn:E6A7D570915611E2BFA2613558FA7D90 and subscriberId = default/ApprovalWorkflowProj!3.0*soa_d071bc60-5d33-4a6d-a2f3-0a004bc66666/ApprovalProcess/20002-BpRcv1-BpSeq2.6-3, transaction will be rolled back>
<Mar 20, 2013 5:10:09 AM PDT> <Error> <oracle.soa.bpel.engine.dispatch> <BEA-000000> <failed to handle message
com.oracle.bpel.client.BPELFault: faultName: {{http://schemas.oracle.com/bpel/extension}remoteFault}
messageType: {{http://schemas.oracle.com/bpel/extension}RuntimeFaultMessage}
parts: {{
summary=<summary>oracle.fabric.common.FabricInvocationException: Unable to access the following endpoint(s): https://stgsso.a.b.c.com:443/workflowservice/CallbackService</summary>
,detail=<detail>Unable to access the following endpoint(s): https://stgsso.a.b.c.com:443/workflowservice/CallbackService</detail>
,code=<code>null</code>}
Please help me in resolving this issue.
Thanks,

1. End user raising the request is able to view the process form, I need to restrict few attributes i.e. position and responsiblity should not be visible to end userEnd user will see Application Instance Form and you can customize the UI to hide attributes
2. Position and Responsibility should be provided by approver (this is specified in request data set of provision resource)
Make your Java Code/Beans/Expression to show/hide attributes conditionally.
3. As per Oracle document there is no request data set for PROVISION and MODIFY resource. What is the replacement for this?Application Instance Form
4. After Request is raised it has been assgined to xelsysadm, how do i control the approval ?Approval Policies

OID 11.1.1.5.0 Connector Issue With Logging in OIM 11.1.1.5.0

I am using OpenLDAP as my target system for the OID connector. I am following the OID 11.1.1.5.0 documentation section "2.1.6.1 Enabling Logging on Oracle Identity Manager". I placed the first part inside the <log_handers> tag and the second part inside the <loggers> tag.
<log_handler name='OIMCP.LDAP' level='TRACE:32'
class='oracle.core.ojdl.logging.ODLHandlerFactory'>
<property name='logreader:' value='off'/>
<property name='path'
value='${domain.home}/servers/${weblogic.Name}/logs/oid_connector.log'/>
<property name='format' value='ODL-Text'/>
<property name='useThreadName' value='true'/>
<property name='locale' value='en'/>
<property name='maxFileSize' value='5242880'/>
<property name='maxLogSize' value='52428800'/>
<property name='encoding' value='UTF-8'/>
</log_handler>
<logger name="ORG.IDENTITYCONNECTORS.LDAP" level="TRACE:32"
useParentHandlers="false">
<handler name="OIMCP.LDAP"/>
<handler name="console-handler"/>
</logger>
The "oid_connector.log" was created for me, but no logs are being printed out whenever I do anything related with LDAP in the OIM console.
Any insights on how to fix this issue?

Any updates i am facing same problem.
thanks in advance

Issue w/ DLP Policy, unable to send mail

I'm trying to implement DLP using both California SB-1386 and California AB-1298 policies, yet almost all of our mail gets blocked because of a violation. One of the two policies I listed will block the email. It appears that the DLP policy is blocking the email because of the users signature. The signature has their name, title, address, and phone number.
Has anybody come across this issue? How do you work around this?
Thanks,

Any thoughts?

Issue in Approval workflow

Hi,
Currently i'm using IDM 7.0 .
My Scenario: i have created a workflow task with approval requesting for a privilege. The privilege has been assigned an autoProvisioning task to the respective system.
As soon as the requestor submits the request, the privilege entry gets updated for the user in IS and the autoprovisioning task is trigerred and before approval the privilege is assigned to the user in the backend system.
But the case should be, if we have an approval task the provisioning should happen only after approval. but here as the privilege has auto provisioning task defined it provisions to the user though the request is with the approval with no action.
We have planned to implement IDM 7.1 in production. My question is:
1. Even in IDM 7.1 do we have the issue i.e before approval will the privilege will be provisioned to the user in the backend system.
2. If this is the case, please help me how to stop the privilege entry in IS and push it to a staging table when a user submits the request and after approval the entry will be moved to the IS from staging and so that the autoprovisioning task get trigerred.
Please throw some light on this.
Thanks in Advance.
Regards,
Pricy

You have to store the requested assignment at another place which will be transfered by the approval task and which is just removed by an decline task.
One simple option is to work with an auxiliary attribute, e.g. called REQUESTED_PRIVILEGE, which is a reference attribute for privileges. Another option works with the entry type MX_PENDING_VALUE.
Kind regards
Frank Buchholz

Wierd Issue In Approval Policy OIM 11.1.1.5.0 BP03

Similar Messages

Maybe you are looking for