Approval Tasks - 11g

Hi,
In trusted reconciliation when a new record comes up, we create the user in OIM and subsequently in AD.
If there are any updates to user attributes like email or role, we are supposed to send an approval request to the User manager and once it is approved only then the changes are to be reflected in OIM and the target systems. How do we configure this?
Thanks,
NV.

user8995781 wrote:
Reconciliation Action Rules:-
No Match Found --> Create User
One Entity Match Found --> Don't Establish Link... Rather Assign to the Approval Group or User manager ...
This serves your purpose...
When the Approval Group decides NOT to let this update flow to the OIM, they can cancel this Reconciliation Event... Otherwise, they can let the Establish link... This assignment can be treated as approval request to the User manager
The above approach is ZERO effort approach...
Alternative way can be: if you are using custom code for Trusted Source recon...
So, in the code, you can validate whether the user already exists in OIM...
If not, let the normal user creation event generation happen...
Otherwise, write code for request generation...
I would prefer ZERO effort approachYou can no longer assign recon status to groups. The only option is Establish Link, None, or Create User if it's trusted.
-Kevin

Similar Messages

  • Custom Event Notification (email) for Approval Tasks in OIM 11g

    Hi,
    how to create event notification for approval tasks in OIM 11g. I mean how to send email notification to user who sholuld accept or reject approval task?
    best
    mp
    Edited by: J23 on 2011-05-30 04:08

    Here is the documentation http://download.oracle.com/docs/cd/E21764_01/integration.1111/e10224/bp_notif.htm#SOASE548
    Search for SOA BPEL Email Notifications for more information:
    http://soa-bpel-esb.blogspot.com/2010/01/email-notification-in-bpel.html
    http://download.oracle.com/docs/cd/B31017_01/core.1013/b28764/bpel013.htm
    There are many more search links that can help you out.
    -Kevin

  • OIM 11g, Get users from table and insert them into Approval Task

    Hi All,
    I have OIM 11.1.1.5.4 in Solaris 10 and I have an Oracle Table configured as Trusted Source.
    I am using Database_App_Tables_9.1.0.5.0 connector.
    I want Reconciliate new users from a Oracle Table as follow:
    1. I ran the scheduled job
    2. The new users reconciled Must get into an Approval Task before of insert them into USR Table.
    3. The Administrator User Approved o Rejected the new users.
    4. The new users that were approval Must insert them into USR Table.
    Is there any form of implement this?, Can you guide me please?.
    Thanks for your Help.

    Through your Schedule Task, generate "*Create User*" (Request Type) request and assign approval workflow for such requests.
    After completion of approval ONLY, users will get created into OIM 11g.

  • Approval Task Title -OIM 11g R2

    Hi,
    How can we pull data related to resource being requested, UDFs as part of the Approval task title in SOA composite?
    Thanks.

    Follow below document to know more about OIM 11g Approval (It's for OIM 11g R1) or you can also follow OIM 11g R2 Developer's Guide:
    http://www.oracle.com/webfolder/technetwork/tutorials/obe/fmw/oim/oim_11g/Request_Workflow_for_Self_Registration/request_workflow_for_self_registration.htm

  • OIM 11g - Email Notification with direct link to Approval Task Details

    Hi,
    We wanted to send email notifications to approver with direct link to the approval task details screen from which the user can either approve or reject the request. In OIM 11g OOTB Notification templates such as Request Creation contains the direct link to Request Detail screen which is something like
    http://localhost:14000/oim/faces/pages/Self.jspx?OP_TYPE=LOOKUP;E_TYPE=MY_REQUEST&T_ID=65
    Wondering if there is something similar for Approval Task Details screen as well.
    Any kind of help or suggestion is greatly appreciated.
    Thanks,
    Deepa

    If at all you cannot get the direct link for approve/reject then try the actionable email from SOA. Once you have that configured the emails gets approver/reject links so that approvers can directly approve/reject the task from email. If that works for you then you can look at the format of those links in the email and deduce what you need the url as.
    HTH,
    BB

  • OIM 11g: send direct link to approval tasks in email notification

    Hi all!
    What do I want to achieve: I want to send email notification to assignee in case if some approval task in OIM has assigned to them and this notification must have a direct link to the page of approval task details from which assignee can approve or reject an approval task.
    The default email notification that exists in approval task “DefaultRoleApproval” has a direct link to a request details page:
    <a href="<%substring-before(/task:task/task:payload/task:url , "/workflowservice/CallbackService")%">/oim/faces/pages/Self.jspx?OP_TYPE=LOOKUP&E_TYPE=MY_REQUEST&T_ID=<%/task:task/task:payload/task:RequestID%>>
    But unfortunately from this page we can’t do any action such as reject or approve.
    To find a direct link to an approval task details page (Self Service -> Tasks -> Task Details: Approval) from which I can perform needed operation I used document ID 748447.1. But I haven’t found a direct link.
    What is the direct link to task details page for approval with exact ID which I can include in an email to satisfy my requirement?
    Thanks in advance!</a>

    If at all you cannot get the direct link for approve/reject then try the actionable email from SOA. Once you have that configured the emails gets approver/reject links so that approvers can directly approve/reject the task from email. If that works for you then you can look at the format of those links in the email and deduce what you need the url as.
    HTH,
    BB

  • Customizing OIM request or approval task pages

    Hi,
    I need help in changing the layout of a particular screen in OIM 11g R1.  Below is the scenario:
    User submit request.
    Request is assigned to corresponding manager(s).
    If request is assigned to multiple managers, one of the managers will ‘Claim’ the request.
    Manager opens the request details and click on ‘Additional Information’.
    Request is again assigned back to requester.
    Requester will open the request from ‘Approval Task’ to submit additional information to approver.
    In this page, request is divided into two parts i) Basic details, Additional Request details, Request information ii) Role/Request details.
    By default, ‘Additional Request Information’ response section can be completely viewed using scrollbar OR can be dragged down. But our requirement is to align the page such that no adjustment should be made to page to view complete content of the page.  Can anyone let me know how to do this?  I wanted to know in which request/approval task ADF pages files (JSFF) are available to customize. I could see only user page (JSFF) to customize, but not related to request/approval task pages.
    - Kalyan Mutya.

    Pending Tasks works in the following manner:
    - User : Any task assigned to a user remains to be visible under its pending tasks unless re-assigned to someone else by the user/admin.
    - Group : Any task which is assigned to a group would not directly come to the user work flow. Whenever you login to OIM, the system checks all your groups and then do a smart calculation for these assigned tasks. So if the user is removed from a group then it would not see these tasks anymore.
    Now for your case, the Group=Business Owner itself is changed. So for new requests the assignment would be to done to the new group but existing tasks remains in the work-flow of the older group, if still required them you might want to re-assign it using OIM API's.
    Thanks
    Sunny

  • Send Email from approval task form

    In my reusable workflow, I have added an approval action. Everything works perfectly. What I want is - When approver comes to approval form, he should be able to send notification email to the initiator (From that form) that he has started working on that document.
    What I have tried - I have added a button clicking on which will submit the form to initiator. 
    But it fails. possible reason - when I create a data connection in workflow's infopath form to submit form as email, I am getting following warning
    "Domain trust form templates cannot be sent as email attachments. to fix this problem, modify the form option to change the security level of form template to restricted".
    I also tried to update status field and wait for it to changes in workflow and send an email from sp designer workflow. it didn't work.
    Please help or suggest any other possible way to achieve this functionality (Send Email from approval task form to initiator).

    Hi mry,
    I could reproduce on my SharePoint 2013 on-premise based on your another
    post.
    Based on the the following article, SharePoint workflow cannot use the InfoPath form in restricted mode which doesn't allow the data connection, but as your image warning message shows sending InfoPath form as mail attachments will need restricted level.
    http://msdn.microsoft.com/en-us/library/office/ee526352.aspx
    You can consider to send a mail to initiator in "Whe a Task Completes" step when you click button approved/rejected, and construct the current task form link format as follow,
    http://sp/_layouts/15/WrkTaskIP.aspx?List=WorkflowTasksListGUID&ID=[%Current Task:ID%]
    Thanks
    Daniel Yang
    TechNet Community Support

  • Issues with Approval Task IN IDM 7.1

    Hi,
    I have been facing issues with Approval task.
    Firstly,
    I have created an Approval task with 'Mskeyvalue' and 'Mxref_mx_privilege' as attributes.
    I am having a problem in the Approvers workflow UI where, we see these approvals.
    It not only displays the requested privilege,but also the already provisioned privileges of the enduser to the approver.
    He will not be able to recognize which privilege has been requested.
    Is this an already known issue which has been sorted out in recently updated patches?
    If not can you suggest me a solution for this.
    Secondly,
    The privilege requested by the end-user is getting provisioned to the backend,even before it is Approved.
    Since Provisioning tasks are mapped through repository,privileges are getting provisioned as soon as
    an entry is made into the Identity Stores.
    But,Ideally the requested privilege should not be proviosioned to the backend until it is approved by the Approver.
    Is this an already known isuue which has been sorted out in recently updated patches?
    If not can you suggest me a solution for this.
    Thanks and Regards,
    Joel
    Edited by: Joel Sundararajan Davis on Jul 16, 2009 11:04 AM

    Joel,
    I'm afraid the approval process is not quite this simple.  You are correct, if you have provisioning setup on the repository for a privilege it will be assigned immediately.  The approval task as you are using it works as an 'interrupt' to a process - nothing more.
    There is an entry type called pending value that you would need to leverage in order to have privileges requested route for approval.  This pending value object is created by default for role requests in 7.1, but I'm not sure how to create a pending value for a privilege.
    Which brings to mind a question - is there a reason you want users to request privileges instead of roles? In general I think the security model is setup so that users are assigned roles which contain one or more privileges.
    If you do choose to use a role instead of privilege, simply set the attribute MX_APPROVAL_TASK to the id of the approval task you want to use and the system will do the rest.  The display you referenced in the first part of your question will always display the current values of the attributes you select for the user, so don't try to display the roles there - just display the user id, name, whatever else is helpful and when the approver clicks on the user id they will get the approval details which will include the requested role.
    Also, please note that if you would like to assign a role directly anywhere (bypass approvals) you can use the switch: {direct_reference=1}
    -Geoff

  • 'No Details' error when tying to appen approval task from oim page -11GR2

    Hi all,
    I am using RequestService service of oim API for triggering Remove Role request. Request is being triggered succesfuly, and approval task is being assigned to the right person. But when I try to open the task I get 'No Details Available For the Task' message in apopup. I tried to open it from the worklist application but there is the same error. What may be wrong? Any Help is strongly appreciated...
    Code snipped I use is below:
    OIMApiHelper helper = new OIMApiHelper();
    User user = helper.findUserByReconKey(userReconKey);
    String userKey =user.getEntityId();
    RoleManager roleManager = Platform.getService(RoleManager.class);
    RequestData requestData = new RequestData();
    RequestService reqsrvc = Platform.getService(RequestService.class);
    requestData.setJustification(" Remove Roles");
    ArrayList<RequestBeneficiaryEntity> entities = new ArrayList<RequestBeneficiaryEntity>();
    List<Role> userRoles = roleManager.getUserMemberships(userKey,true);
    for(int i=0; userRoles!=null && i<userRoles.size();i++){
    Role role = userRoles.get(i);
    String roleKey = role.getEntityId();
    String roleName = role.getName();
    if(roleName.endsWith("ALL USERS")){
    continue;
    log.info("Benificiary Key (Role ID) ->"+roleKey);
    log.info("Benificiary Name (Role Name) ->"+roleName);
    RequestBeneficiaryEntity ent1 = new RequestBeneficiaryEntity();
    ent1.setRequestEntityType(oracle.iam.platform.utils.vo.OIMType.Role);
    ent1.setOperation(RequestConstants.MODEL_REMOVE_ROLES_OPERATION);
    ent1.setEntitySubType(roleName);
    ent1.setEntityKey(roleKey);
    entities.add(ent1);
    if(entities.size()==0){
    return;
    Beneficiary beneficiary = new Beneficiary();
    beneficiary.setBeneficiaryKey(userKey);
    beneficiary.setBeneficiaryType(Beneficiary.USER_BENEFICIARY);
    beneficiary.setTargetEntities(entities);
    List<Beneficiary> beneficiaries = new ArrayList<Beneficiary>();
    beneficiaries.add(beneficiary);
    requestData.setBeneficiaries(beneficiaries);
    //submit request
    String reqId = reqsrvc.submitRequest(requestData);
    BR,
    Aliye

    He is talking about the configuration which you did at the time of OIM Installation.
    Verify:
    Login into EM > System Mbean Browser > Application Defined Mbean > oracle.iam > oim_server1 > oim >Config > XML Config.Discovery > Discovery

  • How to read approval tasks of a request in OIM using API ?

    Hi,
    Is there a way to read the approval tasks and the corresponding status using OIM API i.e., if workflow has two level of approvals, the approval tasks would be: 1. Manager Approval and 2. Role Owner approval ?
    I have been looking at the API docs. but it didnt help, all I could find is to read the stages and the status of each stage i.e., Request Level, Template Level and Operation Level?
    Thanks,
    Hrushikesh

    below link will help you to locate BPEL worklist API
    http://technology.amis.nl/blog/1496/invoking-bpel-worklist-api-from-remote-server-with-java
    http://docs.oracle.com/cd/E12839_01/integration.1111/e10224/bp_worklistcust.htm

  • Some fields are missing in Current Task - Designer Workflow Approval Task Process

    Hi All,
           I am using approval task process activity in designer workflow. When i go to the single task behaviour page, some fields are missing under Current Task Source.
    Some missing fields are :
    1. Assigned To
    2.External participants
    3. Form Urn
    I am trying to get the above fields but not available. What could be the issue?
    Puli Bala

    Hi Puli,
    I think your task list is corrupted, could you please try to associate your workflow to another task list in SharePoint Designer > Click Workflows on left navigation > Click to open your workflow > Under Settings section, select another task
    list and test.
    Thanks & Regards,
    Emir
    Emir Liu
    TechNet Community Support

  • Approval task SP09: Evaluation of approvalid failed with Exception: while trying to invoke the method java.lang.String.length() of an object loaded from local variable 'aValue'

    Hi everyone,
    I just installed SP09 and i was testing the solution. And I found a problem with the approvals tasks.
    I configured a simple ROLE approval task for validate add event. And when the runtime executes the task, the dispatcher log shows a error:
    ERROR: Evaluation of approvalid failed with Exception: while trying to invoke the method java.lang.String.length() of an object loaded from local variable 'aValue'
    And the notifications configured on approval task does not start either.
    The approval goes to the ToDO tab of the approver, but when approved, also the ROLE stays in "Pending" State.
    I downgraded the Runtime components to SP08 to test, and the approvals tasks works correctly.
    Has anyone passed trough this situation in SP09?
    I think there is an issue with the runtime components delivered with this initial package of SP09.
    Suggestions?

    Hi Kelvin,2016081
    The issue is caused by a program error in the Dispatcher component. A fix will be provided in Identity Management SP9 Patch 2 for the Runtime component. I expect the patch will be delivered within a week or two.
    For more info about the issue and the patch please refer to SAPNote 2016081.
    @Michael Penn - I might be able to assist if you provide the ticket number
    Cheers,
    Kristiyan
    IdM Development

  • Need to Hide Objects Default method in Approval Task

    Dear All,
      I have a requirement, where I need to hide the default method that is getting displayed in the approval task of the workflow.
    The employee object and Trip objects default method are getting displayed in the preview of approval task. And same is getting displayed in the universal worklist in the columns of attachments.
      There is an option in univesal worklist configuration where we can remove the attachments for display.
      But to our requirement , only certain objects and attachments should be shown in portal and R/3 of the approval task.We need to restrict the employee object and trip object which is shown in objects and attachments column of the standard descision task.
    Let me have any suggestion on this.
    Thanks in advance.
    regards,
    Sabari Prabhu.

    Hi,
    I took a look into this same issue some time ago, and at least I didn't find a way to restrict only certain attachments for displaying in UWL. If the attachments cannot be hidden, I have tried to avoid using the business objects as much as possible. For example the employee object is many times binded to the task only because you want to display certain attributes in the task description. Then I have just binded the needed attributes into separate container elements. Of course this will not solve all the cases.
    Then other useful options are that you change the default method, and this method is implemented in a way that it either does not display anything, or displays something (maybe just an error message etc.) that makes more sense than the default method that SAP delivers. Or then you can implement for example your own web dynpro application that will be launched when you click the attachment.
    Regards,
    Karri

  • Setting dynamic user in Approval task

    While setting the user at runtime for approval task, I have created a Task Assignment adapter and associate the adapter in the assignment tab for the approval task. I have used reassignApprovalTasksToUser method of tcRequestOperationsIntf class. I have passed the task instance id as well as the user key. From the system console I am able to find that the adapter is invoked.
    I have suppress the standard approval process using tcComplete task adapter.
    When the requestor make the request and goto approval details page the system is showing the request is pending to the re-assigned user however when I login into the console using re-assigned user credential no request is pending in his work busket. What I observed, the request is pending in xelsysadm work busket.
    Would appreciate if someone let me know the step which I am missing.

    Yes, I suppressed the "Approve" Task in standard approval process.
    Can you please let me know how to mapped the key type in the task assignment adapter.
    I have created two variables in the adapter and mapped those two variables from the assignment tab of the approval task.
    I have seen there are two more variables in the Adapters, "Adapter return value for Key type" and "Adapter return value for Key" and these two adapter variables are mapped as "Set at runtime".
    How do I map these two variable?
    No I do not find any exception with regard to execution of the task assignment adapter in the log.

Maybe you are looking for