Manual Provisioning implementation in 11gR2

I am new to 11gR2. I need to migrate an app from 10g to 11gR2.
It has a RO and an object form and process form, an approval workflow and once approval is done it should be manually provisioned by a user in a particular group based on the result from a task assignment adapter. How to translate the same to work in R2. Please let me know the steps in detail which would be of great help to me . Thanks in advance.

find the below link for multilevel workflow approach
Multi Level Approval Workflow
create workflow in oim11gr2(Oracle DOC)
http://docs.oracle.com/cd/E27559_01/dev.1112/e27150/request.htm#CIHFBEFB
http://docs.oracle.com/cd/E27559_01/dev.1112/e27150/request.htm#BABFFJID
once you done with above create an Approaval policy for both Request and Operational level .

Similar Messages

  • No email notification from manual provisioning task - 11gR2

    I have a disconnected application instance and I am using the standard DisconnectedProvisioning flow for provisioning - modified to assign the provisioning task to a group, using a rule which determines the group via the app. instance name.
    The flow itself works as expected and the Manual Task in the flow is assigned to the correct group - the task shows up in the Inbox of the member of the group in the Self Service console
    I would like to send an email to the user when the task is assigned and I have therefore configured SMTP Notification according to this http://allidm.com/blog/2012/11/configuring-smtp-notifications-in-oracle-identity-manager-11gr2/
    I have confirmed that the SMTP server works as expected - I am able to send and receive message using this server.
    On the Notification Tab of my Manual Task I have configured:
    General:
    Status: Assign / Recipient: Assignees
    Status: Complete / Recipient: Initiator
    Status: Error / Recipient: Owner
    Advanced:
    Remind Once: 0 days, 0 hours, 1 minute "After Assignment"
    Encoding: UTF-8
    Make Notifications Secure: False
    Show worklist/workspace URL in notification: True
    Make notification actionable: True
    Send Task attachment: False
    Group Notification Configuration: "Send individual emails" 
    I have redeployed my DisconnectedProvisioning flow to my SOA server a couple of times - remembering not to change the version number and to force overwriting the existing flow.
    My SOA and IDM servers have been restarted as well.
    When requesting the disconnected application instance using the catalog, the manual provisioning task is assigned to the correct user - however - he does not receive any email nor do I send any errors or stack traces from my SOA or IDM servers.
    There must be some check box somewhere that I forgot to tick!
    Does anybody have an idea - did I forget to configure something?
    Kind regards,
    - Tom

    Ok - so I did in fact forget to tick a check box!
    After setting up UMS using this: http://docs.oracle.com/cd/E27559_01/admin.1112/e27149/notification.htm#CACCEDGF and enabling notifications via:
    Enterprise Manager, SOA, soa-infra, SOA Infrastructure drop-down, SOA Administration, Workflow Config:
    Notification Mode: Email
    After restarting my SOA and OIM managed servers - I now receive emails as expected.
    Case closed :-)
    Kind regards,
    - Tom

  • Manual Provisioning task throwing error

    In OIM 10g we have a manual provisioning task which is assigned to an user. when he tries to click Set Response he is getting 'UNKNOWN' also as one of the options with the other two options 'Complete' and 'Cancel'. Also when trying to Complete the provisioning process it throws an error as
    DOBJ.SCHTM_SCH_DATA_CHANGED
    Schedule data cannot be changed once it has been set.
    Please let me know what might be the cause. Thanks
    Regards,
    Durgaprasad

    Hi Kevin,
    Thanks for your reply. I dont have a process task adapter attached to this task. I have a task assignment adapter only. Also i dont have any clue why 'UNKNOWN' option is getting displayed in the set response page.
    Regards,
    Durgaprasad

  • OIM Manual Provisioning

    Hi,
    Just wondering how I would set up manual provisioning for ROs requested in OIM which do not have connectors? i.e. I want to send an notification to the resources admin teams asking them to manually provision following approval in OIM?

    Go to Create User Task > Assignment Tab > Select your user or group there
    You'll see option to send email there.
    Don't attach any adapter in Integration tab of this task.

  • Manual Activity Implementation

    We are integrating our existing product with Oracle workflow and have come across a scenario of manual activity implementation.
    I have used manual activities in other workflow engine. However I could not find any direct reference to manual activity implementation in the workflow guide.
    I saw notification activity but as per my requirement I do not need to send email but instead work only from worklist screen.
    How can I go about implementing manual activities?
    Thanks in advance.

    It is possible to model the scenario where a user needs to perform some manual activity before the workflow process can continue with the use of the 'Block' activity.
    Extract from the Workflow Guide:
    The Block activity lets you pause a process until some external program or manual step completes and makes a call to the CompleteActivity Workflow Engine API. Use the Block activity to delay a process until some condition is met, such as the completion of a concurrent program. Make sure your program issues a CompleteActivity call when it completes to resume the process at the Block activity.

  • Compliant User Provisioning implementation

    What would you say is the amount of time it would take to implement CUP, in the simplest way possible?  In other words, barring unforeseen circumstances, and with the simplest workflows, how long would it take?
    Thanks a lot ...
    Santosh

    Hi Santosh
    I hope you have RAR installed in your system.
    To implement CUP you can follow the plan below,
    1. Compliant User Provisioning Implementation          14 days
    2  Complete AE Pre-Implementation Checklist          1 day
    3. Deploy and install AE on NW                    1 day
    4. Perform AE post -installation configuration and connectivity     1 day
    5. Perform AE issue resolution                    1 day
    6. Discussion & Configuration of Test workflows          7 days
    7. Run end to end request scenario testing for each workflow path     3 days
    It is upto your project resource allocation and working hours to minimise the task ASAP.
    Regards,
    Sudip.

  • Need manual to implement training and event management

    Hi All
    I'm going to implement Training and event management for my client.Plz help me if u've any kind of manual or any guidelines for me.
    Thanks,
    SKM

    Hi Santosh,
    Best way to check the guidelines is to see help.sap.com.
    From my experience you need to follow the following steps:
    1. Create busness event groups
    2. Create business event types
    3. Create resource types
    4. Create resources
    5. Create external instructors (if any)
    6. Create companies (if any)
    7. Create locations
    8. Manage integration switches (SEMIN rows in T77S0 table)
    For the master data creaton activities above, you can create LSMW to make it possible for mass data upload.
    After your business catalog and all other master data is in place,
    1. Plan business events - PSVP
    2. Create business events wth/without resources - PSV2
    3. Book attendees- PSV1
    As recurring activities:
    1. Firmly book the events.
    2. Cancel events (if needed)
    3. Follow-up events.
    Regards,
    Dilek

  • OID manual provisioning from OIM

    Hi,
    while provisioning users in OIm and giving them certain entitlements, when I provision a user with OID It resource,it gets added to OID automatically. I want to do this provisioning manually....that is approval based
    The goal is to give required access to a new User in the system by following standard approval process and manual creation of the user in respective target systems
    how this can be achieved
    following reports need to be generated:
    •     User creation was approved/rejected by Manager.
    •     User creation was approved/rejected by Manager.
    •     User creation was approved/rejected by Manager.
    Edited by: Chhavi Saluja on Jan 31, 2010 10:17 PM

    The user in your it resource, do you have it lowercase? Also, does the user exist in your target?
    -Kevin

  • Regarding SAP Note- Manual/Automatic Implementation.

    Hi Experts,
    We have few OSS Notes related to Archiving. Is there any thing specifically mentioned in the note about the type of implementation(Manual or Automatic). I mean ,how do we know whether a note should be implemented manually or automatically ,or both the ways.Generally if it is manual we should require an access key for manual implementation if automatic is not possible.Please correct me if i am wrong. Please suggest
    Best Regards,
    Lakshman

    Hi,
    please look at the item SOLUTION in the SAP note (immediately before the header data).
    There you can find all actions to do, actions before SNOTE, actions after SNOTE, ...
    But there are more problems if your notes need other related notes, which will be downloaded automatically.
    Look into all of them before implementing the SAP notes for manual actions!
    Regards,
    Klaus

  • Provisioning Error in 11gR2

    Hi All I am trying to provision a user to active directory but I am getting error like below....Help me ASAP
    IAM-2053001 : User testuser1 does not have access to ApplicationInstance ActiveDirectory.
    Thanks in Advance

    make sure the Organization is published for the user's organization.
    Go to Appinstance -> open detail page -> go to organization tab-> add this user's organization here.
    run once agin "catalog sync" job

  • Handling Auto-provisioning failure Manually?

    Hi all,
    WE are going with auto-provisioning for ECC and EP systems.
    I am looking for some suggestions,incase auto-provisioning failed due to some reason.
    I tweaked the connector settings in Portal that will throw some error. Then I configured the escape route for 'Auto Provisioning Failure'. The request goes thro' the escape route to the GRC Admin to fix the auto-provisioning issue. But this is delaying our access provisioning process. I am looking for ways to approve and close the request in case of errors.
    Is there a way to let the user provision manually and document the reasons in the comments and close the request?
    I should just approve and close the request without triggering auto-provision incase of errors.
    Can this be done?
    Thanks in advance..
    Kee

    Hi Siri,
    There are two modes in CUP for provisioning manual and auto however it is not possible for  approvers to switch between these two. This configuration is applicable only all the requests.
    If you have auto provisioning off then in all the request approvers will get "Create User or Assign Role" buttons by which they have to do the manual provisioning.
    The error in auto provisioning is not a usual thing which happen in production environment  and when this happen this should be corrected immediately. If this take some time you can create system level  auto provisioning setting where you can disable the auto provisioning for one system which is causing issue in your environment and provisioning in other system will be working automatically.
    Thanks

  • Problem during implementing SAP note manually

    HI
    I am implementing a note manually, which have instruction like below
    Manual Pre-Implement.
    VALID FOR
    Software Component   SCMSNC                         Supply Network...
    Release 700          Until SAPK-70006INSCMSNC
    Release 701          Until SAPK-70101INSCMSNC
    o  Open BAdI /SCF/CSV_SETTINGS in SE18
    -  Add the following 2 methods to interface  /SCF/IF_EX_CSV_SETTINGS:
    CHANGE_INPUT_ENCODING
    CHANGE_OUTPUT_ENCODING
    But when I go till point I can able to add the method as it is grayed out
    Is there any reason or different way of implementing the note manually?
    Regards
    Dev

    To implement note manually you need to get the access key. Once you give the access key you can apply the note corrections.

  • Replicating the app functionality from OIM 10g to OIM 11gR2

    Hi,
    I have a resource object with an object form and a process form and approval, provisioning configured in OIM 10g design console. Provisioning is manual provisioning assigned to a particular group based on a task assignment adapter. For replicating the same in OIM 11gR2 i followed the following steps.
    1. Created a Resource object in Design console.
    2. Created a dummy IT Resource ( Since while creating app instance it is having IT Resource as Mandatory field. * Is there any way to skip this as i do not have any IT resource in my original app as it is going for manual provisioning?)*
    3. Created a process form in Design Console with the same fields as present in my 10g app process form.
    4. Now i need to Create an app instance and select the created resource object and IT resoource. Also i need to create a form associated with the app instance in which i will add the fields as present in the object form in my 10g app. ( Here i am not understanding how data will flow from object form to process form since there is no data flow mapping here)
    5. Other steps like creating the SOA composite with human tasks and deploying it and after that creating approval policies is pretty much clear.
    Please clarify whether the steps are correct and also the queries which i have posted in between. Thanks in advance.
    Regards,
    Durgaprasad
    Edited by: Durgaprasad on Jan 17, 2013 3:38 AM

    Thanks Gyanprakash. Wll disconnected resource trigger our custom approval process if we select the resource name properly in scope in operational level approval policy. Have you tried a disconnected resource with your custom approval process. Because i read the following lines in admin guide
    Oracle Identity Manager supports provisioning of disconnected resources by using the SOA worklist for manual provisioning of disconnected resources. After the role-based provisioning decision or SOA request approval is complete and the corresponding application instance is determined to be a disconnected application instance, a new SOA workflow is started. This new SOA workflow is assigned to the manual provisioning administrator.
    So i thought disconnected app instance will have its own approval process configured during the creation and it will route accordingly. So just wanted to clarify how to make disconnected app instance to trigger our approval. will approval policay take care of it as i am going to select the name of the disconnected app in the scope field.

  • OIM 11gR2 - unable to suppress display of iPlanet process form

    OIM 11gR2 or 11.1.2
    SJSDS Connector 9.0.4
    I have configured the SJSDS connector, it resource, etc and am able to manually/directly provision iPlanet User to an OIM user through the identity interface.
    I have configured the process form to pre-populate all necessary fields.
    I have checked the Auto Save Form checkbox within the iPlanet User Process Definition.
    It is my expectation that when an administrator directly assigns the resource to a user they will not be presented with the process form. However, when we directly assign the resource, the process form is displayed causing the administrator to submit the form.
    I have double checked the documentation regarding Auto Save Form within the Developer's Guide for Oracle Identity Manager 11g Release 2 (11.1.2) - E27150-03 and the Oracle® Identity Manager Connector Guide for Sun Java System Directory Release 9.0.4 - E10446-12 and I believe my expectations are correct.
    1) Has anyone successfully suppressed the process form while direct or manually provisioning SJSDS through the identity interface?
    2) Could the Auto Save Form be only related to request-based provisioning?
    Thank you in advance.

    These are also good questions but I'll give details :-)
    1) Does that make the "Auto Save Form" checkbox useless? -
    NO, If you don't do this then your Provisioning will stuck into System Validation.
    2) Can you "Auto Save" the Application Instance form?
    NO, as per Oracle either hide these attributes or delete these attributes but there's no clean way to delete such things.
    Question For You:
    If you don't want to Auto Save your Application Instance Form then why did you create that.
    Workaround:
    If you don't want Application Instance then create one more Application Instance without any form

  • No provisioning of User Group for authorization field in user master

    We are implementing CUP 5.3 workflows. Both in manual proviosing and automated provisioning based on User Defaults the user group gets only provisioned to the Groups tab in SU01. The field User Group for authorization on the Logon data tab remains empty (field CLASS from system table USLOGOND, filling CLASS field in table USR02).
    In User defaults both under user default as on the user group tab the user groups have been defined. In manual provisioning the correct list of user groups get displayed for selection.
    Under field mapping in the Application field I only find User Group in user master maintenance, but not User group for authorization. However I would assume I do not need to use field mapping, as I want to automate this provisioning based on user defaults.
    Am I missing a configuration setting here? If so, where can I set it?
    I would assume the provisioning of this field is possible. RAR reports the user group also based on the User group for auhtorization and not from the Groups tab.

    S.Pados,
    I can assure you that what I said in my last response does provision the User Group For Authorization Check on the Logon Data tab; in fact, I was having the opposite issue where the Group tab was not being provisioned; however, I am ruunning AE 5.2 and you said you are running 5.3; maybe something did change or got lost in the releases; it probably is good to see what SAP has to say about this; I would hate to lose this capapbility when I upgrade to AE 5.3
    As far as using the custom field for multiple applications, would that field not be usable for any of the applications you would select in the request form?; if you are using the same table names in the different SAP systems (selectable by the application field on the request) would the drop down selections be whatever the table has defined for that system? I may not be understanding something here so I am just asking;
    It would be great to have a Group field automatically filled in by another selection to avoid the user involvement; I agree with you there; because of our concerns on users entering the AE request, our shop has decided to continue with the users submitting the request through normal email and the security administrators perform the AE entering; this way we have a better idea on something like the GROUP field; we have an option to include the original email as an attachment for justification of the request
    Sorry I could not be of more help
    Jerry
    Ryerson,Inc.

Maybe you are looking for