Approval Policies OIM 11g

Folks ,
Just wanted to understand , in what scenario we need to create operational level of approval policies .
My requirement is develop approval workflow for roles assignement , it involves 3 levels of approval, starting with manger approval and bulk request submission is also possible .
then i should have my SOA composite assigned to approval policy defined for operational level , right ? I cant use request level and template level approval policies ??
Thnx

Folks ,
Just wanted to understand , in what scenario we need to create operational level of approval policies .
My requirement is develop approval workflow for roles assignement , it involves 3 levels of approval, starting with manger approval and bulk request submission is also possible .
then i should have my SOA composite assigned to approval policy defined for operational level , right ? I cant use request level and template level approval policies ??
Thnx
Hi,
You can create 1 composite that defines approvals.
Then you can create 2 policy.
One of them is request level policy, the other one is operation level policy.
Request level policy has:
Auto Approval : yes
Rule : Request.Request Type Equals Role Assignment(like this).
All Scope : no
Operation level policy has :
Auto Approval : no
Approval Process     : your composite
All Scope : yes
Regards.

Similar Messages

  • Approval process oim 11g

    Hi,
    I am creating a approval process.
    I have two question....
    1. how to populate few field from requester's user defination to process template?
    2. All my requests are going to xelsysadm for approval. how to stop that?

    1. Didn't understand your question. Do you want to populate few fields on Request Dataset
    If yes then use Prepopulate Adapter.
    2. Create Approval Policy for your Custom Approval Workflow
    http://www.oracle.com/webfolder/technetwork/tutorials/obe/fmw/oim/oim_11g/Request_Workflow_for_Self_Registration/request_workflow_for_self_registration.htm

  • How to create Approval Policies using API - OIM 11g R2

    Hi,
    Could you please let me know how to create the Approval Policies using java API code in OIM 11g R2.
    Thanks

    Hi Karthik,
    Thanks for sharing the link. Could you please let me know how to specify the rule condition while creating the Approval Policy using the API given in this link.

  • OIM 11g R2 - SOA error with Auto Approval

    Hi,
    I am trying to provision a resource through catalog wizard as an end user .I have created both Operational Level and Request level approval policies with Auto Approval Enabled.The RequestID is getting generated but I am getting the following error in screen
    [Security:090304]Authentication Failed: User SOAAdminPassword javax.security.auth.login.FailedLoginException: [Security:090302]Authentication Failed: User SOAAdminPassword denied
    May I know where should I go and change the SOAAdmin Password ?.Thanks.

    I've run into the same error with oim 11gr2 bp04:
    <Mar 18, 2013 11:07:09 AM CDT> <Notice> <Stdout> <BEA-000000> <<Mar 18, 2013 11:07:09 AM CDT> <Error> <oracle.soa.services.identity>
    <BEA-000000> <<oracle.tip.pc.services.identity.jps.AuthenticationServiceImpl.authenticateUser()> authentication FAILED>>
    <Mar 18, 2013 11:07:09 AM CDT> <Notice> <Stdout> <BEA-000000> <<Mar 18, 2013 11:07:09 AM CDT> <Error> <oracle.soa.services.identity>
    <BEA-000000> <<.> Identity Service Authentication failure.
    Identity Service Authentication failure.
    Either the user name or password is incorrect. Check the error stack and fix the cause of the error. Contact Oracle Support Services if error is not fixable.
    ORABPEL-10528
    Identity Service Authentication failure.
    Identity Service Authentication failure.
    Either the user name or password is incorrect. Check the error stack and fix the cause of the error. Contact Oracle Support Services if error is not fixable.
         at oracle.tip.pc.services.identity.jps.JpsProvider.authenticateUser(JpsProvider.java:2337)
    Caused By: javax.security.auth.login.LoginException: [Security:090304]Authentication Failed: User SOAAdminPassword javax.security.auth.login.FailedLoginException:
    [Security:090302]Authentication Failed: User SOAAdminPassword denied
         at oracle.security.jps.internal.jaas.module.authentication.JpsUserAuthenticationLoginModule.login(JpsUserAuthenticationLoginModule.java:71)
         ...Did you find what the issue is? I'm finding scant information about this user named "SOAAdminPassword" (who makes up these usernames :-/).

  • Can approver modify user's request form in OIM 11g?

    Dear All,
    In OIM 10g, the approver of a request can modify user's request form, we just need to configure the permission in OIM. But, can we do it in OIM 11g?
    If can, how can i configure it?
    really need your help guys,, :D
    Thank you,
    --herry                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               

    Hi user12841694,
    Thanks for the suggestion. But, the data (field) that can be modified by the approver is very limited. We cannot attach multi-valued attribute there (like Child Form).
    Regards,
    ---herry

  • Using web services in Approval Work flow in OIM 11g

    Hi All,
    I am a new bie to OIM 11g. I have created an approval work flow and it is working fine.
    Now my requirement is to use a web service in the approval work flow instead of directly embeding the java code in Java Embeding Activity. Can some body share me a document or url for the process of doing it.
    Thanks in advance for the help.
    Thanks,
    Preeti

    If you are using OIM 11gR2 please refer the below document. All steps are very clear with the screenshots.
    http://docs.oracle.com/cd/E27559_01/dev.1112/e27150/request.htm#autoId27
    See section 21.3.5.7 Configuring the Human Task and BPEL Mappings
    Also see this OBE tutorial for getting idea on Java embedding activity and assigning and retrieving data from global variables in SOA
    http://www.oracle.com/webfolder/technetwork/tutorials/obe/fmw/oim/oim_11g/Request_Workflow_for_Self_Registration/request_workflow_for_self_registration.htm

  • A question regarding authorisation policies in OIM 11g

    Hi,
    I went through the list of OOTB Authorization policies in OIM 11g, just to know what all permissions were given to the 'ALL USERS' role which will be assigned to any OIM user by default.
    Below two policies are of a bit confusion to me. It would be great if you can put some light and clarify the missing link.
    ::::::::Role Management Role Owner Policy::::::
    This has the permission to delete role, modify role and search role:
    This is applicable to all roles in the system.
    This is assigned to 'ALL USERS' role.
    So as per my understanding, any user who is a member of ALL USERS role, can delete, modify and search role.
    But I can see only search role functionality for the default user. (ie., any user who is a member of 'ALL USERS' role)
    A simple user was not able to delete any kind of role.
    Is my understanding incorrect... Where is the missing link???
    :::::::User Management All Users Policy:::::::
    Permission is view user detail.
    Applicable to All users and assigned to 'ALL USERS' role.
    So any user should be able to view any other user detail.
    But its not happening. A user was not able to view another user's detail
    Is my understanding in correct... Where is the missing link???
    Looking forward to hearing from you,
    Many thanks in advance
    Warm regards,
    818343

    Can u check if role is assignd to user.

  • Request Approval Process exception in OIM 11g

    Hi,
    We have upgraded oim 9.1 to oim 11.1.1.5 and we did not have any request approvals in oim 9.1.
    Now we are using oim 11g to develop request approval process. We have tried to raise a request for "Provisioning Resource" - Application Access and "Assign Role" - Business Role Request in OIM 11g environment. Both the Requests are failing with the same exception as below,
    Error:
    IAM-2050014:An error occurred while initiating approvals for request oracle.iam.platform.workflowservice.exception.IAMWorkflowException: Tasklist mapping failed for workflowdefinition: default/DefaultRequestApproval!1.0 due to javax.naming.NamingException: String index out of range: -1. The corresponding error message is {1}.
    Any idea on the above error?
    Thanks!!

    you can follow these videos to see if you can get a basic manager approval working for a self request resource.
    http://www.youtube.com/watch?v=KCA_cxKsi_o&feature=channel_video_title

  • Auto approval for self registration request in OIM 11G R2

    Hi all,
    We have a requirement where we want end users to be able to self-register without needing any sort of approval. We are using OIM 11G R2 with the latest patchset.
    The way to do it in 11G R1 is explained in the following document:
    [http://docs.oracle.com/cd/E21764_01/doc.1111/e14316/unauth_selfservice.htm#BABFEIBF]
    But now that R2 does not have any request templates, we are not sure how to do this. Any help will be greatly appreciated. Thanks for your time.
    -sandeepc

    refer this.
    Configuring Auto-Approval for Self-Registration - Fails due to Organisation

  • How to get details of Pending Approval request in OIM 11g R2?

    Hi,
    We need to find out following details from Pending Approval Request in OIM 11g R2 -
    Request ID,Assignees,Requested Resource Name, Title of Request, Beneficiary, Status of Request.
    Out of above attributes we could find out Assignees, Title of Request, Status of Request, Beneficiary, etc. But we are not getting Request ID and Requested Resource Name.
    We have used API - 'IworkflowServiceClient'
    If we use API - 'RequestService' then we are not getting Assignees and Resource name from Pending approval request.
    Can any one suggeste how can we get these details? Do we need to use other API or other alternative to get all of attributes from Pending Approval Request.
    Thanks.

    Thanks Kevin for your suggestion.
    In OIM 11g R2 I tried task.getIdentificationKey() to get Request ID and task.getSystemMessageAttributes().getTextAttribute6() to get requested resource name but I am getting null values out of it. Is there something I am missing?
    Which common thing I can use to retrieve data from both OIM and SOAINFRA? As I am not getting Request ID from 'IworkflowServiceClient' API so I could not use it to earch request in OIM using 'RequestService'. Even if I have to use query what will be common thing I can use to fetch data from both tablespaces?
    Thanks.

  • How to pass the value from DB in Approval Policy Rule OIM 11g R2

    Hi,
    I need to get the value of rule condition in Approval policy from DB.
    Please let me know how to achieve this. I am using OIM 11g R2.
    Thanks

    How to passing the textbox value within the jsp page
    without using javascript or reload the page.No, jsp executes on the remoter server, the text box is on a client machine, you need to send information to the server over the network, http does this with a request, which will reload the page.....................

  • Sending email notifications in oim 11g approval flow dynamically

    Hi,
    I have 4 level approval workflow in oim 11g and developed custom composite to get all the approver ids and and assigning these ids into 4 variables.
    And used these variables in my custom 4 level sequential workflow. This workflow is working fine. Now I need to update this composite to send email notifications to the approver. So updated code to retrieve email ids and to store them in 4 more vairables. I cannot send all emails at a time thru the code. I need to send email only to the corresponding approver only when the flow reaches to that particular level.
    Subject and body will be same but the email address will vary.
    Can you please let me know the step by step process to implement notifications to these many levels.
    If you think, this is not correct approach (storing all email ids in variables and then sending notifications), please let me know correct approach.
    Thanks,
    Mary

    The way to do it would be to put your human task inside a while loop. This while loop would set a variable to the approver's userid and would continue till all the four approve it. In your human task you need just one approver and that would be the variable which the while loop sets.
    If you do it this way, then you can use the OOTB notification tab in the .task and select the 'Assignee' as the email notification receiver and you won't have to worry about getting the email ids as well.
    As for the current approach which you have, that is of using the sequential approvers in the human task, I haven't tried it, but just try setting the notification tab in the .task to 'Assignee' and event 'On Assignment'. That should do it as well.
    -Bikash

  • Approval process in OIM 11g

    Hi All,
    I am newbie to OIM. I have a requirement with 2 levels of approvals in OIM 11g.
    *1st level:* In the first level the Approver will be selected by the user(self service) from the drop down present in the custom UI.
    *2nd level:* For the 2nd level Approval the 1st level appover should have the ability to select the next approver from a drop down list. The 2nd level approvers belong to a particular group.
    All the approvers should be stored in a lookup table in OIM. When a user raises a request the custom application should get the values from the lookup table and populate the drop down for 1st level approvers. 2nd level approvers sholud be populated in the drop down during the 1st level approval process.
    can any one suggest me the steps to achieve this.
    Thanks

    Task assignment in SOA are done via human task assignment i.e. the .task component in BPEL. Now this task assignment can use various features to compute whom to assign the task to.
    1. Static: This is when you specify the group name or the user name directly into the task.
    2. Dynamic : This is when you assign the approver to be a variable and in your SOA workflow before task assignment you assign value to this variable.
    3. External Routing: This is when you assign a java code inside the .task to do all the assignment and escalations. When using this you can have complex implementations done.
    What I meant by looping is that you will need to call this .task two times, first time of the first approver and second time (if the first approves it) for the second approver. Thus when you are inside the loop you need to get the appropriate value from the payload (payload is sent from OIM to SOA when you submit/approve the request) and set it into the appropriate variable so that .task reads that variable and assigns the task to that person.
    I would recommend going through the BPEL developers guide for better understanding. Start with a simple process and see how it behaves when it runs and then pile on top of it.
    -Bikash

  • Custom Event Notification (email) for Approval Tasks in OIM 11g

    Hi,
    how to create event notification for approval tasks in OIM 11g. I mean how to send email notification to user who sholuld accept or reject approval task?
    best
    mp
    Edited by: J23 on 2011-05-30 04:08

    Here is the documentation http://download.oracle.com/docs/cd/E21764_01/integration.1111/e10224/bp_notif.htm#SOASE548
    Search for SOA BPEL Email Notifications for more information:
    http://soa-bpel-esb.blogspot.com/2010/01/email-notification-in-bpel.html
    http://download.oracle.com/docs/cd/B31017_01/core.1013/b28764/bpel013.htm
    There are many more search links that can help you out.
    -Kevin

  • How can an approver modify the requested items in a request - OIM 11g R2

    Hi,
    I want the approver to add/modify/delete the requested items in a request, when the request is pending for approval.
    For eg. If a user has requested for 2 entitlements, when the request reaches the approver's queue, approver can add/delete the entitlements in the same request.
    Please let me know how to achieve the same in OIM 11g R2.
    Thanks
    Edited by: user9212679 on Mar 15, 2013 9:23 AM

    Check this API documentation
    http://docs.oracle.com/cd/E27559_01/apirefs.1112/e28159/oracle/iam/platformservice/api/AdminRoleService.html

Maybe you are looking for