Auto approval for self registration request in OIM 11G R2

Hi all,
We have a requirement where we want end users to be able to self-register without needing any sort of approval. We are using OIM 11G R2 with the latest patchset.
The way to do it in 11G R1 is explained in the following document:
[http://docs.oracle.com/cd/E21764_01/doc.1111/e14316/unauth_selfservice.htm#BABFEIBF]
But now that R2 does not have any request templates, we are not sure how to do this. Any help will be greatly appreciated. Thanks for your time.
-sandeepc

refer this.
Configuring Auto-Approval for Self-Registration - Fails due to Organisation

Similar Messages

OIM 11gR2 PS1: Need to configure auto approval for self registration

Hi All
I need to configure auto approval for self registration in OIM 11g R2 PS1. I have done this in R1 but looks like it is different in R2.
Can you please guide me or point me to some blog/guide.
Thanks

check this link:
Developing Workflows for Approval and Manual Provisioning - 11g Release 2 (11.1.2.1.0)

Pre-populate Organization to the self registration request in OIM 11gR2 PS1

Hi All
I want to know if there is a way to pre-populate Organization to the self registration request in OIM 11gR2 PS1.
I am trying to configure auto approval and for that I need to add org to the request.
Thanks

Hi,
you can look into the following post : https://forums.oracle.com/message/10830661
Thanks

Auto approval of Self-Registration

Hi,
I intend to specify that approvals are not required for self-registration. Users should be created without any approval. OIM docs says it can be done in this way:
1.Ensure that the user registration approval process does not contain any non-conditional tasks.
2.Ensure that no fields on the registration-related approval pages are set as required that are not present on the User Self-Registration page.
I did this and it does not work. I cannot login using the credentials of the created user. Some points:
1) The standard "user registration approval" process has a system validation task that is not-conditional, but OIM does not allow you to change that.
2) There is a following note in the OIM docs:
Note:
By default, Oracle Identity Manager does not present the Organization and Role fields to the user when they are self-registering. Values for these fields are required to register a user. As a result, the values of these fields must be set on the request, under the User Information branch, by an administrator or approver.
I added the "Organizations.Organization Name" and "Users.Role" fields to the user self reg form as required but it still did not work. How do get this to work? Do I need to write a adapter and attach it to "Provide information" task of the approval process? If yes, please let me know how go about writing that adapter.
Thanks, M.

did you try updating the request with the organization name and the role after the request is submitted.
updateRegistrationUserDetails(long pnRequestKey, java.util.Map poAttributes)
Updates the request's data with the values passed.
you mentioned that you had added the org name and role name to the self reg form, and it didnt work with that. Was the org name and role getting displayed in the table when you went to the requestDetails Screen for that request? If yes, then all you need to do is, attach to the "Approve" task the adapter tcCompleteTask and you should no longer be prompted for any approval for self reg requests.

Creating self registration request using OIM API

Hi guys,
When we try to create a self regisrtation request using OIM API , we ge the following exception:
We get this error when we set the following in Design console.
Does user have to provide challenge information during registration = FALSE
and passed an blank object in place of challenge question parameter in createSelfRegistrationRequest method in tcUtilityBaseClass.
19:22:17,218 ERROR [REQUESTS] Error: Failed to save REQ_CONSOLIDATED_DATA_VALUE
data for Create Entity.
java.lang.NullPointerException
at org.apache.xml.serializer.TreeWalker.dispatachChars(TreeWalker.java:2
44)
at org.apache.xml.serializer.TreeWalker.startNode(TreeWalker.java:414)
at org.apache.xml.serializer.TreeWalker.traverse(TreeWalker.java:143)
at org.apache.xalan.transformer.TransformerIdentityImpl.transform(Transf
ormerIdentityImpl.java:389)
at com.thortech.xl.dataobj.util.RequestDataConsolidator.convertNodeToXML
(Unknown Source)
at com.thortech.xl.dataobj.util.RequestDataConsolidator.addUser(Unknown
Source)
at com.thortech.xl.dataobj.tcDataBase.createRequestForCreateEntity(Unkno
wn Source)
at com.thortech.xl.dataobj.tcDataBase.createRegistrationRequest(Unknown
Source)
at com.thortech.xl.dataobj.tcDataBase.createRegistrationRequest(Unknown
Source)
at com.thortech.xl.ejb.beansimpl.tcUnauthenticatedOperationsBean.createR
egistrationRequest(Unknown Source)
at com.thortech.xl.ejb.beans.tcUnauthenticatedOperationsSession.createRe
gistrationRequest(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.
java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
sorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.jboss.invocation.Invocation.performCall(Invocation.java:359)
at org.jboss.ejb.StatelessSessionContainer$ContainerInterceptor.invoke(S
tatelessSessionContainer.java:237)
at org.jboss.resource.connectionmanager.CachedConnectionInterceptor.invo
ke(CachedConnectionInterceptor.java:158)
at org.jboss.ejb.plugins.StatelessSessionInstanceInterceptor.invoke(Stat
elessSessionInstanceInterceptor.java:169)
at org.jboss.ejb.plugins.CallValidationInterceptor.invoke(CallValidation
Interceptor.java:63)
at org.jboss.ejb.plugins.AbstractTxInterceptor.invokeNext(AbstractTxInte
rceptor.java:121)
How do we create a self registration request , using OIM API , with and without challenge questions?

Well try this piece of code. This might be similar to yours but it worked perfectly for me. For you the error might be the attribute names which you are passing, it should be the one dfined in the FormMetaData xml as below.
     import Thor.API.tcUtilityFactory;
     // define you class below
     ConfigurationClient.ComplexSetting config = ConfigurationClient.getComplexSettingByPath("Discovery.CoreServer");
     final Hashtable env = config.getAllSettings();
     Hashtable quesAns = new Hashtable();
     HashMap user = new HashMap();
     user.put("Users.User ID", "SelfTesting");
     user.put("Users.First Name", "SelfTesting");
     user.put("Users.Last Name", "SelfTesting");
     user.put("Users.Email", "[email protected]");
     user.put("Users.Password", "SelfTesting");
     user.put("ConfirmPassword", "SelfTesting");
     tcUtilityFactory.createRegistrationRequest(env, user, quesAns);
And for the query of challenge QnA, these are the following combinations possible:
1) Property Does user have to provide challenge information during registration set to TRUE
- During self-registration from web console, it will show you Challenge Questions section on the right. If you do not select any questions, it will thow you an error there itself.
- Doing it from API will create no difference(even if you pass a blank HashTable). The request will be created successfully and on completion when the user tries to login, it will ask for Security QnA.
2) Property Does user have to provide challenge information during registration set to FALSE
- During self-registration from web console, it doesn't show you Challenge Questions section on the right. The request will be created successfully and on completion when the user tries to login, it will ask for Security QnA.
- Doing it from API, you will have to pass a blank HashTable as in above code. The request will be created successfully and on completion when the user tries to login, it will ask for Security QnA.
Hope it works.
Thanks
Sunny

Validating Date fields in Self Registration page in OIM 11g

Hi
I have 2 custom date fields(Start Date, End Date) in Self Registration page in OIM 11g.
I need to do validation on these fields, like difference between start date and end date should not be more than 3 months.
I should show a popup message to user whenever start date and end date is more than 3 months.
How to achieve this?
Thanks in Advance

Hello!
Sorry bring up this topic again, but I have faced a "curious" situation. My validator code is:
    public void validate(RequestData reqData) throws InvalidRequestDataException {
        List<RequestEntity> requestEntities = reqData.getTargetEntities();
        if (requestEntities != null && !requestEntities.isEmpty()) {
            for (RequestEntity requestEntity : requestEntities) {
                List<RequestEntityAttribute> attributes = requestEntity.getEntityData();
                for (RequestEntityAttribute attribute : attributes) {
                    if (attribute.getName().equals("CPF")) {
                        if (attribute.getValue().equals("12345678900")) {
                            throw new InvalidRequestDataException("Invalid CPF");
        (new oracle.iam.requestactions.plugins.datavalidator.CreateUserDataValidator()).validate(reqData);
    }This is still in testing, but have you guys noticed the last line?
It works nicely, is it normal? If it is, is there any reason for my exception just been raised when I submit the request? (for example, if the user provides a duplicated e-mail it rises before mine.

Auto Approval in self registration

Hi All,
Default scenario for self reg in OIM 9.1.x --> Afer submitting self registration form currently request goes to Xelsysadm(Admin/Approver, by default) for approval, Where xelsysadm(Approver in this scenario) provides information for the Organization field as "Xellerate Users" and checks Approve. And hence user gets created.
In the above scenario I wish a litte change i.e. when request is recieved by xelsysadm at that instance the Organization field should automatically get/pops the value as "Xellerate Users".
Is it possible to achieve the above scenario by updating FormMetaData.xml ? Pls experts guide me on this.....
Thanks & Regards,
Newbie (But nt Fresher)

1. Open the OIM_HOME/xellerate/config/FormMetadata.xml file.
2. Copy the following lines from <form name="SelfRegistrationApprovalForm"> to <form name="SelfRegistrationUserForm"> section:
<attributereference editable="true" optional="true">Organizations.Organization Name</attributereference>
<attributereference editable="true" optional="false">Users.Xellerate Type</attributereference>
<attributereference editable="true" optional="true">Users.Role</attributereference>
3. Save changes and restart the OIM Server.
4. Now when you try to do a Self Register, you need to enter values for Organization name, User Type and Employee Role.
5. Enter value for User Type as End-User.
6. Enter value for Employee Role as Full-Time (Note: The value should be Full-Time and not Full-Time Employee).
7. Submit request, and the request would get automatically approved.

Automatic approval for Self-registration with companies

Hi,
I would like to automatically approve users who have self-registered themeselves. Is it possible to automatically approve users when they self-register with companies.
Any help / suggestion is greatly appreciated.
Rgds,
Janvi.

Hi
you cannot do it because when a user self reg eu_role gets assigned to it and its administrator job to assign the role.if you need to built in any addon functionality you have to change core selfreg.par file use a search at usr directory.this par can give you lot of ideas how to preassign roles without approval of administrator.also check UM configuration under systemadministration system configuration notification and direct editing tab.
With regards
subrato kundu

Can we apply an event handler only for a custom request in oim 11G?

Hi,
We would like to create a custom request for user creation, modification etc.
I saw that event handlers allow to add business rules by running java code during differents steps of processes.
I would like to know if we can trigger an event handler on a specific request and not on all user CREATION, UPDATE etc.
For example, we would like to have differents creation requests and a differents event handler on each request.
And can we add "logical" input on request form and read them in event handler?
For example, 3 inputs: day, month and year on the form which fill one user attribute "end contract date".
Regards,
Pierre

thank you Akshat,
I saw part 19 in the developper's guide. If I understand, I can change the default CreateUserRequestData to define ALL form components that will be used in my differents user creation request templates.
I can use prepopulation adapter to pre populate field with java code.
I can use the plug-in point oracle.iam.request.plugins.StatusChangeEvent to run custom java code.
But they don't mention where you can run java code for a specific creation template named "MyUserCreationTemplate1" and other java code for an other specific creation tempalate" MyUserCreationTemplate2".
That makes me think we must retrieve the template name in java code and execute the appropriate business logic.
if request name==MyUserCreationTemplate1
Edited by: user1214565 on 31 mai 2011 07:42

Self registration request and approval process

We are looking to implement self-registration with a bit of workflow when we move to Portal 10.1.2 A system where a user requests access, their request is approved (or denied) by another person and then an account is created with appropiate permissions.
We are currently using an Excel spreadsheet e-mailed back and forth, we have begun designing the process with standard forms and reports in it's own schma, but the last piece will still need to be manual (creating the account).
Does anybody know of a way to automate this process of account creation?
Does Application Server 10.1.2 self-registration have similar capabilities? if so, where could I look to learn what it can do?
Thanxs,
ljalg

refer this.
Configuring Auto-Approval for Self-Registration - Fails due to Organisation

Block auto-approval for initiator of project

We have a need to requirement to block auto-approval for initiator of project invoices if he or she is also an approver.
Please can someone clarify if this can be done using functional setups or WF customization is required.

refer this.
Configuring Auto-Approval for Self-Registration - Fails due to Organisation

Auto Approval of Self User Registration Fails OIM 11g R2

Use Case : Auto Approval of Self User Registration
Steps followed
1. A New Approval Policy created with Auto Approval flag set as True for Request Level Approval.
2. A New Approval Policy created with Auto Approval flag set as True for Operation Level Approval.
3. The field Organization was pre populated using the Pre Population Adapter, as mentioned below.
+<AttributeReference name="Organization" attr-ref="act_key" type="Long" widget="ENTITY" length="256" required="false" available-in-bulk="false" entity-type="ORGANIZATION">+
+<PrePopulationAdapter name="OrgPrepopulateAdapter" classname="com.plugin.OrgPrepopulateAdapter"/>+
+</AttributeReference>+
4. A new user was created using the "Register New user" Link.
5. Log in as System Adminstration and under Track requests, found that the New request has failed.
6. On click of Request link, the request details shows the Organization field has populated with the expected value.
7. The Logs suggests that the Request failed due to Organization field going Null.
LOG
[2013-02-12T15:50:39.138+05:30] [oim_server1] [ERROR] [] [oracle.iam.request.impl] [tid: [ACTIVE].ExecuteThread: '7' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: oiminternal] [ecid: e171ff3c1743d36a:6c2e4f90:13ccdc4a231:-8000-00000000000006f8,0] [APP: oim#11.1.2.0.0] Exception thrown java.lang.IndexOutOfBoundsException: Index: 0, Size: 0
[2013-02-12T15:50:39.138+05:30] [oim_server1] [ERROR] [] [oracle.iam.request.impl] [tid: [ACTIVE].ExecuteThread: '7' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: oiminternal] [ecid: e171ff3c1743d36a:6c2e4f90:13ccdc4a231:-8000-00000000000006f8,0] [APP: oim#11.1.2.0.0] Exception thrown Index: 0, Size: 0[[
java.lang.IndexOutOfBoundsException: Index: 0, Size: 0
     at java.util.ArrayList.RangeCheck(ArrayList.java:547)
     at java.util.ArrayList.get(ArrayList.java:322)
     at oracle.iam.requestactions.approval.operationlevel.OrgBasedMethodology.getOrgDetails(OrgBasedMethodology.java:215)
-------------

Use Case : Auto Approval of Self User Registration
Steps followed
1. A New Approval Policy created with Auto Approval flag set as True for Request Level Approval.
2. A New Approval Policy created with Auto Approval flag set as True for Operation Level Approval.
3. The field Organization was pre populated using the Pre Population Adapter, as mentioned below.
+<AttributeReference name="Organization" attr-ref="act_key" type="Long" widget="ENTITY" length="256" required="false" available-in-bulk="false" entity-type="ORGANIZATION">+
+<PrePopulationAdapter name="OrgPrepopulateAdapter" classname="com.plugin.OrgPrepopulateAdapter"/>+
+</AttributeReference>+
4. A new user was created using the "Register New user" Link.
5. Log in as System Adminstration and under Track requests, found that the New request has failed.
6. On click of Request link, the request details shows the Organization field has populated with the expected value.
7. The Logs suggests that the Request failed due to Organization field going Null.
LOG
[2013-02-12T15:50:39.138+05:30] [oim_server1] [ERROR] [] [oracle.iam.request.impl] [tid: [ACTIVE].ExecuteThread: '7' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: oiminternal] [ecid: e171ff3c1743d36a:6c2e4f90:13ccdc4a231:-8000-00000000000006f8,0] [APP: oim#11.1.2.0.0] Exception thrown java.lang.IndexOutOfBoundsException: Index: 0, Size: 0
[2013-02-12T15:50:39.138+05:30] [oim_server1] [ERROR] [] [oracle.iam.request.impl] [tid: [ACTIVE].ExecuteThread: '7' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: oiminternal] [ecid: e171ff3c1743d36a:6c2e4f90:13ccdc4a231:-8000-00000000000006f8,0] [APP: oim#11.1.2.0.0] Exception thrown Index: 0, Size: 0[[
java.lang.IndexOutOfBoundsException: Index: 0, Size: 0
     at java.util.ArrayList.RangeCheck(ArrayList.java:547)
     at java.util.ArrayList.get(ArrayList.java:322)
     at oracle.iam.requestactions.approval.operationlevel.OrgBasedMethodology.getOrgDetails(OrgBasedMethodology.java:215)
-------------

Approving Self-Registration request using API

Hi all
As an end user I have created a self registration request using using the method, createRegistrationRequest from utility factory.
Now as an approver , i wanted to approve the request. I have updated the Organization name using updateRegistrationUserDetails method in tcRequestOperationsIntf by passing
hashMap.put("Organizations.Organization Name",
"Requests");
reqOper.updateRegistrationUserDetails(reqAppSet
.getLongValue("Requests.Request ID"),hashMap);
This is working fine. However when I use the following procedure to approve this request ,
reqOper.setRequestResponse(reqAppSet
.getLongValue("Requests.Key"), getUsrKey("XELSYSADM"), "Approve");
it throws the following exception
Thor.API.Exceptions.tcAwaitingApprovalDataCompletionException
at com.thortech.xl.ejb.beansimpl.tcRequestOperationsBean.setRequestResponse(Unknown Source)
at com.thortech.xl.ejb.beans.tcRequestOperationsSession.setRequestResponse(Unknown Source)
What else needs to be done in this approving aspect for the task to be approved?
Thank you
Regards
shashidhar

Hi all
I found the solution,
along with this ,
hashMap.put("Organizations.Organization Name",
"Requests");
you need to update ,
Employee -Type and User Type
Thank you
shashidhar

Approval Workflow for Self Registration

Hi ,
I have a requirement where I have to develop an approval workflow for self registration.
My requirement is If the user type is Employee the user must not go through approval, but if the user type is contractor they must go to some admin user for approval.
How can I achieve this.
Regards

Hi,
You can refer this link "Create a Custom Approval Process for Self Registration" it might clear your doubts. Also you can create rule as said in below post. For that you can refer "http://codigoctm.files.wordpress.com/2012/11/lab-06-access-policy.pdf".
Regards,
Sunil

AD User self-registration request workflow

Hi Experts,
I Am working on oracle 11G 11.1.1.5
I have installed AD connector and things are working as expected.
I have enabled the AD User RO for self request.
And the self registration request is working as expected.
In the workflow however the DefaultResource Approval and DefaultOperational Approval are getting called and teh tasks are assigned to the admin user (xelsysadm)
Where in the system is this workflow defined?
Is it possible to remove these approval steps completely (not auto approve)?
I want the approval to be assigned to a New Group that i have created as AD_ADMINSITRATORS in OIM Roels.
Will i have to write a completely new custom workflow?
Do i have to create a new request template because right now i see the default AD User Form that the user needs to fill in for self request (with default pre-pop) and i am ok with this form for request.
Is self -registration different from request based provisioning?
It woulod be very helpful if someone can explain the complete process.
Thanks and Regards,
Kungo

Kungo wrote:
Hi Experts,
I Am working on oracle 11G 11.1.1.5
I have installed AD connector and things are working as expected.
I have enabled the AD User RO for self request.
And the self registration request is working as expected.
In the workflow however the DefaultResource Approval and DefaultOperational Approval are getting called and teh tasks are assigned to the admin user (xelsysadm)
Where in the system is this workflow defined?
Is it possible to remove these approval steps completely (not auto approve)?NO, You need to go through these stages and auto approve is the only way.
>
I want the approval to be assigned to a New Group that i have created as AD_ADMINSITRATORS in OIM Roels.
Will i have to write a completely new custom workflow?Not necessarily, modify you AD resource object and assign AD_ADMINISTRATORS as the Object Authorizer and then attach the OOTB Resource Autorizer Approval process to the template or request level or operation level policy as you want.
Do i have to create a new request template because right now i see the default AD User Form that the user needs to fill in for self request (with default pre-pop) and i am ok with this form for request.Request template is different then the dataset (dataset is something which you see when creating a request). Template is created for permissions around attributes you want on that request and also who can create the request.
>
Is self -registration different from request based provisioning?Yes self registration is different than provisioning.
>
It woulod be very helpful if someone can explain the complete process.
Thanks and Regards,
Kungo

Auto approval for self registration request in OIM 11G R2

Similar Messages

Maybe you are looking for