Approval Process in OIM

Hi All,
I am new to OIM. I tried creating an approval process for SUN Java System directory server.for this i create an task assignment adapter and added it to the Approval process. the problem here is that when i tried to assign the "Resource" through Requests tab on Admin interface to any user it goes to approver inbox but after approving the request user is not provisioned in the target resource.It shows nothing in the Resource profile page of the user also.
Any pointer or help will be appreciated.

Aaah....i think i was not able to explain my problem properly...let me explain you what i did...
1. i have imported the connector for SUN java system directory server as explained on oracle site in Oracle by example.
2. This connector have created the iPlanet user (provisioning) process for iPlanet User object name automatically having create process and no. of conditional processes (Disable user, enable user etc..).
3. Now i wrote one Adapter having approval logic and attach it to one custom process of Approval type and assign it to iPlanet User as Object type. There is no table definition attached to it and when i tried to attach the available Form "UD_IPNT_USR" to it, it gives me some sdk error.
After this i have tested the approval process in two ways...
1. Through admin console (as xelsysadm), i have created a test user and assign this user to resource "iPlanet User" through Resource Profile combo tab. The user is successfulll provisioned with no approval required but i was expected that it should go to approver as per logic.
2. In second scenerion, i assigned the resource through Request tab (Requests-->Resources-->Grant Resource). It goes to xelsysadm Pending approval items first and after this approval it goes to the other approver as per logic defined in adapter. After this approver approved the Request, it goes complete with no provisioning. I am wondering if i need to attach the Approval and Provision Process so that first it goes to approver and after approver approves it, gets automatically provisioned.
Please look into the problem and suggest some solution. I am sure it should not be as tedious as i made it, but i don't have other option :(

Similar Messages

Approval process in OIM 11g

Hi All,
I am newbie to OIM. I have a requirement with 2 levels of approvals in OIM 11g.
*1st level:* In the first level the Approver will be selected by the user(self service) from the drop down present in the custom UI.
*2nd level:* For the 2nd level Approval the 1st level appover should have the ability to select the next approver from a drop down list. The 2nd level approvers belong to a particular group.
All the approvers should be stored in a lookup table in OIM. When a user raises a request the custom application should get the values from the lookup table and populate the drop down for 1st level approvers. 2nd level approvers sholud be populated in the drop down during the 1st level approval process.
can any one suggest me the steps to achieve this.
Thanks

Task assignment in SOA are done via human task assignment i.e. the .task component in BPEL. Now this task assignment can use various features to compute whom to assign the task to.
1. Static: This is when you specify the group name or the user name directly into the task.
2. Dynamic : This is when you assign the approver to be a variable and in your SOA workflow before task assignment you assign value to this variable.
3. External Routing: This is when you assign a java code inside the .task to do all the assignment and escalations. When using this you can have complex implementations done.
What I meant by looping is that you will need to call this .task two times, first time of the first approver and second time (if the first approves it) for the second approver. Thus when you are inside the loop you need to get the appropriate value from the payload (payload is sent from OIM to SOA when you submit/approve the request) and set it into the appropriate variable so that .task reads that variable and assigns the task to that person.
I would recommend going through the BPEL developers guide for better understanding. Start with a simple process and see how it behaves when it runs and then pile on top of it.
-Bikash

Approval process creation steps using JDeveloper in OIM 11g R2

Hi,
Please help me to create approval process creation using JDeveloper and how to use the approval process in OIM provision in OIM 11g R2.
Thanks in Advace,
srini

refer developer's guide to get the detailed steps. http://docs.oracle.com/cd/E27559_01/dev.1112/e27150/request.htm#BABFFJDH
Also refer OBE tutorial http://www.oracle.com/webfolder/technetwork/tutorials/obe/fmw/oim/oim_11g/Custom_Approval_Process_for_Resource_Request/custom_approval_process_for_resource_provision.htm#t3
There will be slight changes in the steps as this OBE is for 11gR1.
High level steps:
Create a new application using the following command
ant -f <OIM_HOME>/server/workflows/new-workflow/new_project.xml.
It will be created in OIM_HOME/workflows/new-workflow/process-template/ directory
Openthe .jws file in jdeveloper and edit the default human task and add whatever logic is needed.
Then deploy the composite after which you need to create an approval policy and link the SOA composite created
Edited by: Durgaprasad on Apr 24, 2013 1:55 AM

Question related to Approval Process

Hi All,
I am a new bie to OIM.
I have created a two level approval process.The user will have to select the first level approver while raising the request. We have a approver only field in the DataSet so that the first level approver can select the next level approver.The first level Approver logs in and selects the second level approver and then completes the first level approval.
Once the second level approver approves it the request will be completed.
I have used some common java code by creating a jar(to get the request details) and placing it in the composite instead of writing all the java code in "java embeded code".
The two level approval process was working fine , but I have added loggers in the java code and now when I test the composite both the approvals are executed at a single time.
The first level approval is getting completed by its own with out selecting the second level approver and there is an error in the second level approval. I have tried chaging the Priority of the approval policies also , but still the same issue.
Please help me in resolving this issue. This is very urgent.
Thanks in advance for your help.
Thanks,
PT

Mark the approver only field as required.
find the below link for more detail:
Approval process in OIM 11g
--nayan

Approval Process Not triggering?

Hello,
I have created a simple Approval process in which request should go to the Beneficiary manager through JDEVELOPER. I have also registered this Approval process with OIM.
After that i have created two Approval policies..
REQUEST LEVEL--
This is Auto Approved.
Approval Rule :: Template Name equals Provision Resource.
Set Priority : 1 (Request Type=Provision Resource)
OPERATIONAL LEVEL --
Approval Process attcahed at this level.
Approval Rule :: Template Name equals Provision Resource.
When i am creating a request for a particular resource the request is getting assigned to XELSYSADM by default (as per the Developers Guide for OIM 11g, if no approval policy is attached with the template the default Approval process gets trigerred and the request gets assigned to XELSYSADM.)
Can somebody help me by telling why the Default Approval process is getting triggered and not the one which i have attached at the Operational level?
Am i missing Something?
Thanks in Advance.

As i have mentioned earlier, it is configured such that the appropriate approval process is triggered when a request for particualr resources is requested.
There are multiple tasks in each one of the approval process.
The approvals were triggering well 2 days ago and suddenly there seams to be a problem in the approval triggering.
The approval process was not edited / updated for any of these resources. Wondering why suddenly OIM does not work well for the approval triggering???
here the problem is none of the configured approval processes are triggering. Its not just one approval process but all 12 approval processes (including standard approval) are not triggering when the request is raised.
Appreciate your help till now, please suggest me how to make OIM trigger the approvals again!
Thanks

OIM: Error while deploying Custom Approval Process for Self-Register

While deploying the Custom Approval Process for Self-Register, i am getting the following error in scac.log file
Nov 16, 2011 2:48:58 PM oracle.fabric.common.wsdl.SchemaManager isIncrementalBuildSupported
INFO: XMLSchema incremental build enabled.
Nov 16, 2011 2:48:58 PM com.collaxa.cube.CubeLogger info
INFO: validating "ApprovalProcess.bpel" ...
oracle.jrf.UnknownPlatformException: JRF is unable to determine the current application server platform.
     at oracle.jrf.ServerPlatformSupportFactory.getInstance(ServerPlatformSupportFactory.java:79)
     at oracle.integration.platform.blocks.WLSPlatformConfigurationProvider.<clinit>(WLSPlatformConfigurationProvider.java:44)
     at oracle.integration.platform.blocks.FabricConfigManager.<clinit>(FabricConfigManager.java:155)
     at oracle.integration.platform.blocks.xpath.FabricXPathFunctionResolver.loadXpathFunctions(FabricXPathFunctionResolver.java:271)
     at oracle.integration.platform.blocks.xpath.FabricXPathFunctionResolver.loadXPathConfigFile(FabricXPathFunctionResolver.java:153)
     at oracle.integration.platform.blocks.xpath.FabricXPathFunctionResolver.init(FabricXPathFunctionResolver.java:51)
     at com.collaxa.cube.xml.xpath.BPELXPathFunctionNameResolver.loadFabricXpathFunctions(BPELXPathFunctionNameResolver.java:57)
     at com.collaxa.cube.xml.xpath.BPELXPathFunctionNameResolver.<init>(BPELXPathFunctionNameResolver.java:48)
     at com.collaxa.cube.xml.xpath.BPELXPathFunctionNameResolver.<clinit>(BPELXPathFunctionNameResolver.java:44)
     at com.collaxa.cube.lang.compiler.bpel.XPathExprValidatorVisitor.<init>(XPathExprValidatorVisitor.java:122)
     at com.collaxa.cube.lang.compiler.bpel.AssignValidator.<init>(AssignValidator.java:89)
     at com.collaxa.cube.lang.compiler.bpel.BpelParser.<init>(BpelParser.java:452)
     at com.collaxa.cube.lang.compiler.bpel.BPELValidator.validate(BPELValidator.java:60)
     at com.collaxa.cube.lang.compiler.BPEL1Processor.validate(BPEL1Processor.java:329)
     at com.collaxa.cube.lang.compiler.BPEL1Processor.process(BPEL1Processor.java:153)
     at com.collaxa.cube.lang.compiler.CubeParserHelper.compile(CubeParserHelper.java:47)
     at oracle.fabric.bpel.bpelc.BPELComponentValidator.validate(BPELComponentValidator.java:40)
     at oracle.soa.scac.ValidateComposite.validateComponentTypeServicesReferences(ValidateComposite.java:1117)
     at oracle.soa.scac.ValidateComposite.doValidation(ValidateComposite.java:500)
     at oracle.soa.scac.ValidateComposite.run(ValidateComposite.java:150)
     at oracle.soa.scac.ValidateComposite.main(ValidateComposite.java:135)
Nov 16, 2011 2:49:00 PM CubeProcessGenerator compile
WARNING: classpath is: D:\JDev11g\Middleware\jdeveloper\jdev\extensions\oracle.sca.modeler.jar;D:\JDev11g\Middleware\jdeveloper\soa\modules\oracle.soa.fabric_11.1.1\fabric-runtime.jar;D:\JDev11g\Middleware\jdeveloper\soa\modules\oracle.soa.mgmt_11.1.1\soa-infra-mgmt.jar;D:\JDev11g\Middleware\oracle_common\modules\oracle.fabriccommon_11.1.1\fabric-common.jar;D:\JDev11g\Middleware\jdeveloper\soa\modules\oracle.soa.bpel_11.1.1\orabpel.jar;D:\JDev11g\Middleware\jdeveloper\soa\modules\oracle.soa.mediator_11.1.1\mediator_client.jar;D:\JDev11g\Middleware\oracle_common\modules\oracle.mds_11.1.1\mdsrt.jar;D:\OIMPS1\Middleware\oracle_common\modules\oracle.jps_11.1.1\jps-manifest.jar;;D:\OIMPS1\Middleware\Oracle_IDM1\server\workflows\new-workflow\process-template\SelfRegistrationApprovalApp\SelfRegistrationApproval\SCA-INF\classes;D:\OIMPS1\Middleware\Oracle_IDM1\server\workflows\new-workflow\process-template\SelfRegistrationApprovalApp\SelfRegistrationApproval\SCA-INF\classes;D:\OIMPS1\Middleware\Oracle_IDM1\server\workflows\new-workflow\process-template\SelfRegistrationApprovalApp\SelfRegistrationApproval\SCA-INF\gen-classes;D:\OIMPS1\Middleware\Oracle_IDM1\server\workflows\new-workflow\process-template\SelfRegistrationApprovalApp\SelfRegistrationApproval\SCA-INF\lib\oimclient.jar;D:\JDev11g\Middleware\oracle_common\modules\commonj.sdo_2.1.0.jar;D:\JDev11g\Middleware\oracle_common\modules\oracle.fabriccommon_11.1.1\fabric-common.jar;D:\JDev11g\Middleware\oracle_common\modules\oracle.xdk_11.1.0\xmlparserv2.jar;D:\JDev11g\Middleware\jdeveloper\soa\modules\oracle.soa.bpel_11.1.1\bpel1-1-xbeans.jar;D:\JDev11g\Middleware\jdeveloper\soa\modules\oracle.soa.bpel_11.1.1\orabpel-common.jar;D:\JDev11g\Middleware\jdeveloper\soa\modules\oracle.soa.bpel_11.1.1\orabpel.jar;D:\JDev11g\Middleware\jdeveloper\soa\modules\oracle.soa.bpel_11.1.1\bpel_coherence_config.jar;D:\JDev11g\Middleware\jdeveloper\soa\modules\oracle.soa.bpel_11.1.1\orabpel-exts.jar;D:\JDev11g\Middleware\jdeveloper\soa\modules\oracle.soa.bpel_11.1.1\thirdparty.jar;D:\JDev11g\Middleware\jdeveloper\soa\modules\oracle.soa.bpel_11.1.1\bpm-analytics.jar;D:\JDev11g\Middleware\jdeveloper\soa\modules\oracle.soa.bpel_11.1.1\orabpel-thirdparty.jar;D:\JDev11g\Middleware\jdeveloper\soa\modules\oracle.soa.bpel_11.1.1\wsif-binding.jar;D:\JDev11g\Middleware\jdeveloper\soa\modules\oracle.soa.bpel_11.1.1\orabpel-validator.jar;D:\JDev11g\Middleware\jdeveloper\soa\modules\oracle.soa.bpel_11.1.1\monitor-rt-xbean.jar;D:\JDev11g\Middleware\jdeveloper\soa\modules\oracle.soa.bpel_11.1.1\oracle.soa.bpmn.jar;D:\JDev11g\Middleware\jdeveloper\soa\modules\user-patch.jar;D:\JDev11g\Middleware\jdeveloper\soa\modules\oracle.soa.thirdparty.jar;D:\JDev11g\Middleware\jdeveloper\uddi\lib\oracle.soa.uddi.jar;D:\JDev11g\Middleware\jdeveloper\soa\modules\oracle.soa.fabric_11.1.1\bpm-infra.jar;D:\JDev11g\Middleware\jdeveloper\soa\modules\oracle.soa.fabric_11.1.1\testfwk-xbeans.jar;D:\JDev11g\Middleware\jdeveloper\soa\modules\oracle.soa.fabric_11.1.1\fabric-ext.jar;D:\JDev11g\Middleware\jdeveloper\soa\modules\oracle.soa.fabric_11.1.1\soa-infra-scheduler.jar;D:\JDev11g\Middleware\jdeveloper\soa\modules\oracle.soa.fabric_11.1.1\xmlunit-1.1.jar;D:\JDev11g\Middleware\jdeveloper\soa\modules\oracle.soa.fabric_11.1.1\fabric-runtime.jar;D:\JDev11g\Middleware\jdeveloper\soa\modules\oracle.soa.fabric_11.1.1\soa-infra-tools.jar;D:\JDev11g\Middleware\jdeveloper\soa\modules\oracle.soa.fabric_11.1.1\soa-xpath-exts.jar;D:\JDev11g\Middleware\jdeveloper\soa\modules\oracle.soa.fabric_11.1.1\oracle-soa-client-api.jar;D:\JDev11g\Middleware\jdeveloper\soa\modules\oracle.soa.wls.jar;D:\JDev11g\Middleware\jdeveloper\soa\modules\oracle.soa.fabric_11.1.1\fabric-client.jar;D:\JDev11g\Middleware\jdeveloper\soa\modules\oracle.soa.fabric_11.1.1\fabric-runtime-ext-was.jar;D:\JDev11g\Middleware\jdeveloper\soa\modules\oracle.soa.fabric_11.1.1\fabric-runtime-ext-wls.jar;D:\JDev11g\Middleware\jdeveloper\soa\modules\oracle.soa.fabric_11.1.1\oracle.soa.fabric.jar;D:\JDev11g\Middleware\jdeveloper\soa\modules\oracle.soa.workflow_11.1.1\bpm-services.jar;D:\JDev11g\Middleware\jdeveloper\soa\modules\oracle.soa.ext_11.1.1\classes
In scac_out.xml file following is the error message
<Fault>
<severity>error</severity>
<loc>/ns:composite</loc>
<line/>
<col/>
<file/>
<msg>
<![CDATA[SCAC-50012]]>
</msg>
</Fault>

Hi,
I have run into the same problem with SOA 11.1.1.5 version. In my case after fixing the following two errors it seems to work fine.
If you have followed the guide, there must be some errors:
First the java code if copied then contains an extra enter value:
Instead of:
"try {
System.out.println("Prototype for invoking an OIM API from a SOA Composite");
System.out.println("RTM Usecase: Self Registration Approval by Organization
Administrator");"
Use the following:
"try {
System.out.println("Prototype for invoking an OIM API from a SOA Composite");
System.out.println("RTM Usecase: Self Registration Approval by Organization Administrator");"
The other error is that you should not use <BEAHOME>/oracle_common/modules/oracle.jps_11.1.1/jps-manifest.jar, but the <BEAHOME>/oracle_common/modules/oracle.jps_11.1.1/jps-api.jar in jdeveloper. After these the deployment to the application server works fine for me.

Request Approval Process exception in OIM 11g

Hi,
We have upgraded oim 9.1 to oim 11.1.1.5 and we did not have any request approvals in oim 9.1.
Now we are using oim 11g to develop request approval process. We have tried to raise a request for "Provisioning Resource" - Application Access and "Assign Role" - Business Role Request in OIM 11g environment. Both the Requests are failing with the same exception as below,
Error:
IAM-2050014:An error occurred while initiating approvals for request oracle.iam.platform.workflowservice.exception.IAMWorkflowException: Tasklist mapping failed for workflowdefinition: default/DefaultRequestApproval!1.0 due to javax.naming.NamingException: String index out of range: -1. The corresponding error message is {1}.
Any idea on the above error?
Thanks!!

you can follow these videos to see if you can get a basic manager approval working for a self request resource.
http://www.youtube.com/watch?v=KCA_cxKsi_o&feature=channel_video_title

OIM - Approval process

Hi All
I have OIM integrated with application 1. Application 1 has many responsibilities which are to be maintained by OIM by 1 level approval process. This means the end user can log into OIM admin console and request for more responsibilities. I have a table for Resource object and another table for Responsibilities similar to AD Resource Object and its child table for AD groups.
Problem is that every responsibility has a separate owner and if a user raises a request for responsibilityX, it should go to the owner of the responsibility. How should I go about it..
Please help !!
Thanks

Thanks Kevin
This is really helpful. I guess this would probably work in case when the number of responsibilities and user groups are limited. But in my case I have almost 1500 responsibilities and having a user group corresponding to these responsibilties would not be an easy task.
I take your suggestion of creating a lookup for the mapping of responsibility and its corresponding owner. To move further, shall I go ahead and use API's to handle the object form and assign the task based on this lookup. Can you please suggest if this will be a good approach and provide some basic startup.
**** Another thing which I am not able to understand is - When I provision a user using direct provisioning, these reponsibilities are attached to the process form as child table. How should I go ahead with creating a object form for the responsibilities.
Currently, when an end user logs into admin console, he can only request for RO provisioning with no details or responsibilities. (No object form is attached to RO).
This is similar to Group assignment in Active Directory, but in that case I wrote a separate piece of code that was adding the user directly to the AD group.
Thanks

OIM 11g Self-registration approval process

Hi
I wanted an OIM self-Registration request to be auto-approved. I am using OIM11g.
Can anyone give me the directions.
Regards
user12841694

The OIM11g approval process are three levels.
1. template level
2. request level
3. operational level
Both template level and operational level can be auto approved where as the request level cannot be.
The reason being, the self-regisistration template ships with user's organization attribue as the Approver-Only attribute indicating it should be populated only by the apporver.
Looking for any possible options to auto approve request level also.
http://download.oracle.com/docs/cd/E14571_01/doc.1111/e14316/unauth_selfservice.htm#OMUSG3065
Regards
user12841694
Edited by: user12841694 on Nov 9, 2010 10:20 PM

OIM 11g Approval Process

Hi Expert/All,
May I have assistance regarding the OIM 11g?
Currently, I already create one approval (only 1 level approval) for some resource in OIM 11g, then I'm continue to test the resource with two below way:
1. If I'm try to add "New Resource" directly by xelsysadm via manage user menu (without approval process), the provisioning process was successfully creating new account in the target system.
2. The wierd is if I'm try to test Self-service request by user, after approval by last level approval, then there is no provisioning activity by OIM system, it is like OIM do nothing. The request status is show "Obtaining Template Approval" and history approval is complete by manager user (only 1 level approval)
My question is, does it still required any configuration for completing the provisioning process after the approval process?
Thanks,
Ricky R

Hi Kevin,
Thanks for the information, but it still do nothing, OIM did not continue the provisioning account to target system event I already assign SYSTEM ADMINISTRATOR roles to the user and manager. How I can trace this logs? currently I'm just look at the oim_server1.log at <OIM_DOMAIN>/severs/oim_server1/logs. Is there any other log file can we use to trace the app server logs?
Thanks,
Ricky R

Approval Process for Role in OIM

Experts,
When a role is approved for a user in OIM, can we stop the user without getting assigned to the role immediately.
We would like this scenario, user requests for role, the role owner approves it in OIM and then the role assignment happens in OIA.(or)
User requests for the role, the approval workflow sends the request to OIA for approval from role owner , once approved it can be assigned in OIA and then automatically reflected in OIM as well.
Which option is more feasible...and recommended?
Thanks,
Krish

Thanks Kevin for the reply.
Approval process code will be initiated in OIM and approving happens in OIA. Once approved, the role can as well be assigned in OIA. This can update OIM automatically by assigning the user with the requested role.
(Or)
Approval process code will be initiated in OIM, approving also happens in OIM, the role also gets assigned in OIM and an OIA updates this change accordingly.
Which one would be recommended?
Krish.

OIM Approval Processes

I have an approval process configured to go to the target user's manager first and then to a resource owner for the final approval. If a user request the resource the workflow works as expected, goes to their manager for approval and then to the resource owner. The issue I am having is when the user's manager request the resource on thier behalf OIM then sends the approval to the manager's manager which is not what I was expecting. I was expecting the manager's approval to be auto completed since it was the manager of the user who was submitting the request. Has anyone run into this?
Thanks

I found that the result I am seeing is actually how OIM was designed to handle such scenarios in the 9.1 release. Their logic is that a requestor should never be an approver which makes sense but I would have expected that if a manager requested a resource for a direct report the approval request for a target user's manager would get auto completed since it is the targets user manager making the request. Looks like I will have to write custom code to get the desired approval process.

Approval process oim 11g

Hi,
I am creating a approval process.
I have two question....
1. how to populate few field from requester's user defination to process template?
2. All my requests are going to xelsysadm for approval. how to stop that?

1. Didn't understand your question. Do you want to populate few fields on Request Dataset
If yes then use Prepopulate Adapter.
2. Create Approval Policy for your Custom Approval Workflow
http://www.oracle.com/webfolder/technetwork/tutorials/obe/fmw/oim/oim_11g/Request_Workflow_for_Self_Registration/request_workflow_for_self_registration.htm

Restart approval process through Thor api in oim 9i

Hi,
   I am using oim 9i.
Scenario:
   For a resource object i have a object form and a child form along with it.
   The user fills the object form along with the child form and submits for approval.
   During the approval process the user(requester) is able to edit the child form even though approval is started and approved by some stakeholders.
   Can we restart the approval process if any changes is made on child form?
   Also i have added entity on POST-Insert on child form.I come to know whenever there is change on the form.
   But on the change in the child form i want to trigger approval back to the 1st approver(restart the approval process).
Could you help me with the api for restarting approval process or any url link which would help.
Regards,
Nirav

okk...thanks for the replies..
I am a newbie and wanted to know how to call this process task adapter as i currently have entity adapter on POST-insert on child form which identifies that there is some update..So does that means through entity adapter i need to call the process task of a approval process?
Also is it possible to get the value of user who updated the child form as soon as it is updated?
On post-insert adapter when i try to get the value of "formupdate by" whenever it is triggered it gives me the previous "update by" and not the current "update by" value?
Does the database get updated later or am i doin somethng wrong,beacuse if it is a post-insert i should get values of "latest update by" on the form?

OIM - Approval process available on updates/modifications of a resource ?

Hello,
I would like to implement a typical workflow :
1) UserA is able to provision a resource for other users. He provisions it for UserB. There's an approval process which says that it's UserB's manager (ManagerB) who will approve this request. UserA provisions the resource.
2) ManagerB approves the request
3) UserB is now able to use the resource and modify it. He modifies it and his modifications aren't effective until his manager's approval.
4) ManagerB approves the modification request, ensuring that the data is correct
The main goal of this kind of workflow is that every action of the resource user means that an according approval process is fired.
Right now I'm unable to implement such a process. Another user said on this forum that approval events are fired on grant/enable/disable/revoke events. I would like to know if it's possible to use this kind of processes on ANY modification of a given resource.
And by the way, is there any mean to know exactly which are the minimal permissions/rights to have to be able to provision a resource to a user in a workflow as described earlier ? Right now I'm working with 177 different rights, whose names aren't quite helpful...
Thanks in advance !

Ajp , following your instructions, to enable approval on attribute changing (e.g, for resource named 'MyResource') I should take the following steps:
1) Create a resource object called "Dummy ResObj"
2) Create a Process Definition of type Approval (with respective task assignment adapters) and associate it with 'Dummy ResObj'.
3) Create a task inside this to get the manager's approval
4) Open a Process Definition of type Provisioning associated with the resource 'MyResource'
5) Create a Process Task Adapter to provision target user to the Dummy ResObj
- this adapter would get passed the resource object key and the user key
- the adapter will create a request (on adding user)
- it would also utilitize the tcUserOperations API
7) Create a Process Definition for Dummy ResObj
8) Create a Process Task Adapters to provision and de-provision target user to the Dummy ResObj
9) Create tasks in the 'Dummy ResObj' provisioning process that calls this process task adapters
Am I right? Haven't I missed something?

Approval Process in OIM

Similar Messages

Maybe you are looking for