OIM Approval Workflow

Hi,
I need to implement the following scenario in OIM.I have following 3 types of users in OIM . Employee,Organization Admin and Resource Admin.
1.Organization Admin logs into OIM and request a resource to an user.While requesting,Organization admin needs to enter some information about the user (it could be either process form or resource form)
2.Once the request is submitted,Resource Admin should see it in his pending task list.
3.Resource admin approves the request and the user gets provisioned to the target system.
I tried creating a process form,in which the admin can enter user details,but I am not sure how to attach approval workflow in that.
When I tried using Resource Form,I am not able to populate user's information in the form.
Any idea about how to implement this scenario?.Thanks in Advance.

Hey Nitesh...
Thanks for the Reply....
Sorry i mistakenly put process form in place of object form. By default approver is only able to see only first name and last name in user details. What additional configuration i need to do so that approver can see the object form also for that user and then can approve/Reject. As the approver is from different organization so not able to view user details....but as per requirement have to show only the requested resource object form!
Also i have couple of other questions which i am not able to crack....appreciate if you can help me to figure out the solution :)
1. When i requested a resource for multiple users then approver is not able to approve it for few users and reject it for others under same request. Does OIM provide any kind of customization which can help me to achieve this.
2. Once my user get provisioned in any resource lets say AD after that when i modified the user OIM profile and save it, it should modify the AD account also if the modified attribute is mapped in Resource form using prepopulate. Is this valid requirement?
Edited by: user10781632 on Feb 26, 2009 5:35 AM

Similar Messages

OIM Approval Workflow Scenario/Question

Hello,
Can anybody please explain how the approval workflow actually works in OIM?
Scenario - After a user does self registration using the web console - how can we specify tasks in between that workflow - so that the user's manager should receive/approve the request first and then suppose then the request goes to some Department Head for his approval and then only the user will receive and confirmation email for logging into OIM.
I understand the Provisioning workflow perfectly from OIM User Form to PRocess Form and from their to Target. But really want to understand this 'Approval/Self REgistration' workflow. Can anybody explain me with the steps that are needed to be configured in OIM Design Console for the 'scenario' explained above.
Many Thanks!

Hi,
There is one possible solution for your requirement. I jsut the forget the name of the workflow which trigger while self registration.
You can do one thing in that process add two task which assign task to manager and once he approved the request task will be assigned to deapartment head and once he approved the user will be created in OIM.
Task will be assigned not as approval but as asisgned task, if its ok with you; just try this and let me know.
Regards
Alabhya Goel

OIM approval workflow creation

Hi Gurus,
Is it possible to give permission to a group in the OIM to be able to create/manage Resource's approval workflow? If so, what I should do? Which permission are needed?
Or just system administrator is able to do that?
The group was created just to perform that activity and it can't have another privileges.
I would appreciate any help.
TiA,
Carlos

In pre 11g there is no really good way to do this as approval workflows are defined in the design console. One of the things I am excited about 11g is that the approval workflow is moved to BPEL (http://iamreflections.blogspot.com/2010/09/oim-11g-approval-workflow-orchestration.html)
If you need to support this in pre 11g you can either try to configure the design console to just have the approval workflow menu item. i haven't tried that but it does not look simple or straightforward to me.
If the approval workflows are simple you could try to go over the custom resource object or custom menu item road. A third option would perhaps be to let them define the workflows in a free standing tool and then parse in the changes and use the OIM API to update the approval workflows.
Best regards
/Martin

OIM Approval Workflow starting Exception

Hi to all. I'm working with approval workflow in OIM11g and I've followed the OBE for the design of a ResourceSerialApproval Workflow. When submitting a request which is to be approved by this workflow at request level, the request creation fails with this exception:
IAM-2050014:An error occurred while initiating approvals for request oracle.iam.platform.workflowservice.exception.IAMWorkflowException: Unable to instantiate the workflow process due to null. The corresponding error message is {1}.
I've searched this forum for the error and seen that maybe it could be caused by a bad props file when registering the workflow: this is NOT my case. The workflow gets correctly deployed.
Could anyone help me?
Please I have no idea on how to solve this problem.
Thanks in advance,
Giuseppe.

Hi,
Open your approval workflow in Jdev, open "ApprovalProcess.bpel" file in source mode,
Check if custom attribute is getting assigned before the payload is loaded:
something like
<copy>
<from variable="resourceAdmins"/>
<to variable="initiateTaskInput" part="payload"
query="/ns2:initiateTask/task:task/task:payload/task:ResourceAdministrators"/>
</copy>
<copy>
<from>
<payload xmlns="http://xmlns.oracle.com/bpel/workflow/task">
<RequestID xmlns="http://xmlns.oracle.com/bpel/workflow/task"/>
<RequestModel xmlns="http://xmlns.oracle.com/bpel/workflow/task"/>
<RequestTarget xmlns="http://xmlns.oracle.com/bpel/workflow/task"/>
<url xmlns="http://xmlns.oracle.com/bpel/workflow/task"/>
Regards,
Raghav.

OIM , Approval WorkFlow Page Error

Dear All,
Kindly if anyone can share some experience on the following issue:
1 - I have IDM 9.1.0.x
2 - To define the approval workflow when I try to open the workflow designer i.e Manage Resources>Manage> select resource ... it shows error page with no error number just a link to IDM admin.
My question is:
1- Could it be due to some issue in connector of the relevant application (MySQL on backend> GTC with Java customized connector)?
2- Or it could be a problem in the IDM system itself related to some configurations, missing installation components.
what should I check to verify if it is some issue with the IDM servers settings?
Thanks

thanks for your reply,
can you please be a little more elaborated and guide me how to remove this error, when click on the resource instead of opening workflow designer it opens a page with a link to admin, not showing any error just "A system error has encountered" message.
thanks.

Defining Approver list in BPEL -OIM Approval Workflow

Hi,
We have a requirement where in we need to retrieve array of users from external resource (not integrated with OIM) and pass them as an approver list during resource provisioning request. As these users are not managed as a role in OIM, how do we achieve this functionality? We are retrieving these approvers as part of Java embedding in BPEL process, but not sure how to pass them as a approver list in BPEL -One of them can approve the request.
Thanks in advance

Thanks Kevin,
So can I assign String DataType to the comma separated OIM Logins (approvers) and BPEL will take care of assigning them as approvers appropriately? If so, then will the request will be approved if one them approves it?
Thanks again

Approval Workflow deploy in Jdeveloper - SOA Server not showing up in list

Trying to deploy an OIM approval workflow. Added my weblogic server, and tried to deploy. When it comes to selecting a SOA server, no soa servers show up in the list. Any ideas? Thanks.

For sca deploy are you need to specify few other properties; are you putting those correctly?
<ant antfile="${oracle.home}/bin/ant-sca-deploy.xml">
    <property name="serverURL" value="?" />
    <property name="sarLocation" value="?" />
    <property name="overwrite" value="?" />
    <property name="user" value="?" />
    <property name="password" value="?" />
    <property name="partition" value="?" />
</ant>HTH,
BB

OIM 11.1.1.5 Approval Workflow Issue

Hi,
I have installed OIM 11.1.1.5. While self-registration of a user, the request is created and by default assigned to xelsysadm as the request level approver.
However, when the approver logs in, assigns the organization to the user and approves the request, it is shown that the approval task is completed.
But the request status doesn't change and remains "Obtaining Request Approval" and thus the user is not created in OIM.
In SOA server, on checking the logs (soa_server1-diagnostic.log) we found the following error -
[soa_server1] [ERROR] [] [oracle.soa.bpel.engine.dispatch] [tid: orabpel.engine.pool-5.thread-4] [userId: weblogic] [ecid: ee9b8be672bf5ad0:-72f1c18e:1399f6dc058:-8000-0000000000000108,0:1:100000006] [APP: soa-infra] failed to handle message[[
java.lang.NoSuchMethodError: oracle.wsm.policy.model.IPolicySet.getStatus()Loracle/wsm/policy/model/IPolicySet$POLICYSET_STATUS;
We are unable to resolve the issue, we've tried using a custom approval workflow instead of the default approval workflow.
Kindly help.
Edited by: 957679 on Sep 7, 2012 6:17 AM
Edited by: 957679 on Sep 7, 2012 6:19 AM

Hi ,
I actually faced the same issue some time back .., it took me almost a week to resolve it ..
This is happening basically due to incompatible version of wsm-policy-core.jar on your server . Please check all the FMW s/f installed on your server . One of them is incompatible with OIM 11.1.1.5.0 .
Are you using BIP 11.1.1.6 by any chance .
Thanks
Suren

OIM 11gR2 - Out-of-the-box Approval Workflows

Does anyone know of any good resources that describes the out-of-the-box approval/provisioning workflows of 11g R2? I have searched Google back and forth but found nothing. Some of the workflows are obvious by their name (such as default/BeneficiaryManagerApproval!1.0), but others are not so clear regarding their flows.
On that same note, can one of the out-of-the-box approval workflows be configured to route to an approval group instead of single users?
Thanks for your help!

Instead of searching for docs in google i guess reverse-engineering on your own will be the best way to understand the approval workflows. Navigate to OIM_HOME/server/workflows/composites. It will contain all the approval workflow zip files. Unzip the required one which you want to understand and there will be a .jws file in it. Now open that in jdeveloper and open AprrovalProcess.bpel and composite.xml. It will show how the approval routes and what are the business rules written, everything. It is the best way to understand the approval workflows.
In the same way u can make changes to the out-of-the-box approval workflows also. See this OBE tutorial to understand how you can assign the approval to a group
http://www.oracle.com/webfolder/technetwork/tutorials/obe/fmw/oim/oim_11g/Request_Workflow_for_Self_Registration/request_workflow_for_self_registration.htm
Also please try the approval workflow given in the developer's guide which covers most of the basics.
http://docs.oracle.com/cd/E27559_01/dev.1112/e27150/request.htm#CIHFBEFB

OIM 11g Approval Workflow - Error

Hi All,
I have created a approval workflow (Operational) in OIM11g. Have deployed it as a soa-composite and registered with OIM. Till here everything went fine.
I have created an apporval policy, to assign to requests of a specific type of resource .
When the resource is requested, the approval workflows is gettign triggered,but the request goes to failed state.
I am getting any exceptions in the logs / on the console.
Has anyone encountered this kind of issue.
Vicky

vicky wrote:
Hi All,
I have created a approval workflow (Operational) in OIM11g. Have deployed it as a soa-composite and registered with OIM. Till here everything went fine.
I have created an apporval policy, to assign to requests of a specific type of resource .
When the resource is requested, the approval workflows is gettign triggered,but the request goes to failed state.
I am getting any exceptions in the logs / on the console.
Has anyone encountered this kind of issue.
VickyCheck your SOA server through the em and that should show you your request and the fault states and everything .. that should give you an idea on what is going wrong ...

OIM 10g - admin modify action on approval workflow

Hello,
What are the OIM tables involved to gather information if an OIM admin (member of SYSTEM ADMINISTRATORS group) has modified something in the approval workflow ?
Can we gather this data from any of the OIM tables?
Thanks,

Hi,
In your approval process, have you set "Request Target User's Manager" as the Target Type? I have some approval processes like that and they work ok.
In my case, I've got a problem with the Standard Approval process... It does not work when I set the Request Target User's Manager as the Target Type.
See the request's Approval Detail to make check if an instance of the approval process was created. If so, which user was set as the assignee.
Renato.

OIM 11g Approval Workflow Notification Configuration

Dear All,
Is there any documentation guide or tutorial or step by step guide about how to configure approval workflow notification in oim 11g?
In my case, a request must be approve by 3 (three) level of approver, "Requester Manager" --> "Application Business Owner" --> "Application Administrator". On each level, a notification need to be sent to the approver contains all information about the requester and the resource that requested.
How can i configure the notification since approval processes are in SOA composite and the development of the workflow is using JDeveloper?
Many Thanks for your help.

Hi
Please go through the link, You can configure notification any time based on you requirement. You have to get emails to whom you want to sent, just set this mail in a variable. Use this variable as to ,..
http://docs.oracle.com/cd/E23943_01/dev.1111/e10224/bp_notif.htm#BABEDFCC
Thanks,
Kuldeep

OIM 11g Approval Workflow Notification questions

Hello.
I am working with an OIM 11g approval workflow. The workflow will flow from one group to another, and if one user in each group approves it, it is approved. Because I assigned it to groups, the notifications are going to every user in each group.
Is it possible to send a notification to only a single user within a group, instead of everyone? Does auto claim do this?
Is it possible to send a different notification if the ApprovalTask is rejected versus approved?
Thanks.

If I understand correctly, you want to send the notification only to the user who has approved the request and not to all in the group. You can do it by NOT using the notification tab in the .task but by using EmailNotificationService after the .task in BPEL. There you can read the data from payload on who approved the request and can send the notification only to that user. Same way for rejects. You can configure that.
1. After your .task completion you can have a decision box which can check the value for 'outcome' and then direct it to appropriate path for appropriate notification.
or
2. Based on outcome you can set the template in a variable and then in the notificationservice use that variable.
-Bikash

OIM - Update Approval Workflow

Hi all, is it possible in OIM to define a update approval workflow?
The workflow will be triggered when the user tries to update a spesific attribute in the resource form.
Is it possible?

Request to modify does not exist within OIM. You would need to create a generic object to be able to submit a request for a modification which would then lookup the appropriate object for the user and then provision the changes to that object.
-Kevin

OIM 11g - Approval workflows for disabled user accounts

Hi,
We have a scenario wherein a user will be created in OIM with a future start date resulting in a Disabled Untill Start Date user status. Once the user is created, we should let anyone submit a New Hire form for the user and the submitted form needs to be approved by the Manager. Once the Manager approves the form, the target accounts should get created with disabled status. These accounts should get enabled on the start date.
As submission of New Hire Form is not a straightforward process, we came up with the following design.
A dummy resource object corresponding to the New Hire Form will be created and can be requested for a newly hired person by anyone who has OIM access. An approval workflow will be configured for the New Hire Form Resource object and provisioning of target accounts will be based on Manager's approval for this resource object.
However the challenge that we see with this design is, it wasn't possible to place a request for New Hire Form dummy resource object for a disabled user. But the requirement is to complete the New Hire Form submission process befor the user becomes active.
How can these workflows be invoked for a disbaled user? Is there any other way to implement this requirement?
Any kind of help/guidance is greatly appreciated.
Thanks and Regards
Deepa

911709 wrote:
If I create a dummy resource, called "Group Membership" for example, and use this to show the groups that are available in AD, how can I have the request be routed to different approvers? For example, group cn=HR Users,cn=Users,dc=company,dc=com needs to be routed to HR for approval. Group cn=IT,cn=Users,dc=company,dc=com needs to be routed to IT for approval. How can I change the approvers dynamically?
Re: Spawning multiple approval tasks in parallel in OIM11g SOA Composite
You can have dynamic task assignment in BPEL; where you defne a variable in the task assignment and update the variable with the approver group name before triggering the task assignment task. Check BPEL docs for same.
If every group needs a different approver, and there are 5000 groups, can I make 5000 resources and use the built-in routing of approvals? Or, use the dummy resource approach and handle the management of the approvals in some other way.Just make one resource with one field attached to it which takes in the group name and handle approval in SOA by reading a lookup which has AD group to Approval Group mapping.
>
Thank you.-Bikash
Edited by: Bikash Bagaria on Feb 18, 2012 1:00 AM

OIM Approval Workflow

Similar Messages

Maybe you are looking for