OIM Multiple Approval

Hi,
I would like to have multiple approval with this following workflow:
1) User requests a resource object
2) The request will appear to Todo-List to the line manager or direct manager of the requester (user requested).
3) Manager approve or disapprove the request
4) Once approved, an OIM administrator will have final approval (so this will kick-off my provisioning tasks too)
How do I achieve this in OIM?
Thank you very much.

this has been discussed multiple times please refer to this.
Re: Approval Process

Similar Messages

  • Spawning multiple approval tasks in parallel in OIM11g SOA Composite

    Hi,
    We are trying to implement the following scenario.
    1) We are trying to develop a SOA composite for AD Group Access
    2) The request dataset contains a child table for AD User Group Details which is as follows.
    <AttributeReference name="AD User Group Details" attr-ref="UD_ADUSRC" type="String" length="20" widget="text" available-in-bulk="true">
    <AttributeReference name="Group Name" attr-ref="Group Name" type="String" length="400" widget="lookup" available-in-bulk="true" lookup-code="Lookup.ADReconciliation.GroupLookup" primary="true"/>
    </AttributeReference>
    3) Consider the user is already provisioned to AD.
    4) User now tries to request for AD Group Access by using a request template
    5) The request dataSet for the resource "AD Group Access" will be displayed where the user would "Add" the group(s) to which (s)he want access.
    6) Once the request is sumbitted the associated SOA composite would be executed.
    7) Now, in the SOA composite the logic should be as follows:
    a. For each group selected, there is a corresponding dataApprover who should approve the request.
    b. Once the dataApprover approves the request it goes to the next approver who is securityApprover.
    c. Once the securityApprover approves the request, the request should go thru and the user should get the membership in the AD Group.
    d. Since "AD User Group Details" is a child form in the request dataset, the user can add multiple groups in the same request.
    e. If there are muliple groups selected in the same request, then the same request should spawn parallel approval tasks for all corresponding dataApprovers and securityApprovers.
    f. Then the user should get membership to those AD Groups for which the corresponding dataApprover and securityApprover had approved the request.
    e. If a dataApprover or securityApprover rejects the request then the user shouldn't get membership to the respective group. However, this shouldn't prevent the user from getting membership to other groups for which dataApprover-securityApprover approval was done.
    The dataApprover and securityApprover for the groups are stored in a db table mapping to the corresponding group name.
    We have implemented a SOA composite for which the logic is fine if we add only one group in the child table of request dataset. As per the current implementation, when a user submits the request, the dataApprover and securityApprover for the selected group are fetched from the table and the global variables in SOA composite are set with the ID of dataApprover and securityApprove using setVariableData. These are sting variables. These variables are used in the approval task. The approval task has two "Single Type" participants - dataApprover and securityApprover. These participants fetch the value of dataOwner and securityOwner from the global variables set using setVariableData.
    Now, as mentioned above, if mutiple groups are added like group1, group 2 etc. then there should be multiple approval tasks spawned in parallel that will be approved/rejected by dataApprover1-securityApprover1, dataApprover2-securityApprover2 etc. Depending on the output (approve/reject) the user should get membership to appropriate groups.
    Any inputs on how to modify the current composite to spawn multiple approval tasks in parallel depending on the number of groups added from the requestDataSet would be helpful.
    Regards,
    Swaroop

    Single request id then you are bit safe. The way to do it would be:
    1. Set the dataApprovers as a comma separated list of all the data approvers for all the groups.
    2. Set the securityApprovers as a command separated list of all the security approvers for all the groups.
    3. In Human Task assign the first stage to all the dataApprovers and second stage to securityApprovers.
    Cons of this approach are:
    1. All the approvers would see all the data and they might be confused what they are approving.
    2. securityAppprovers for say group1 won't get the item untill all the dataApprovers approve the request even though dataApprover has approved the request for group1.
    3. Would be hard to implement the rejection cases; depending upon how you want to handle the rejections. For e.g. what if any dataApprover rejects the request? Should the whole request be rejected? If so what would happen to those which have already been approved by dataApprovers? Same case goes for securityApprovers. Again since you cannot modify the requested data once the request is submitted; thus you cannot remove the rejected groups from the request.
    4. You provisioning won't trigger untill all dataApprovers and all securityApprovers have approved the request.
    5. Any one approve from comma separated list of approvers would approve the request. Thus you cannot make sure that all the approvers should approve the request. The workaround would be to create parallel stages in human task and assign one group/approver to one parallel stage. This would mean that you will have to hard code the number of parallel approvals which can be generated in your BPEL human task (This would again depend upon the number of groups requested). To workaround this you could use BPEL extenal routing program where you can pragmatically assign tasks but again since there is no entitlement based request engine in OIM, thus there would be issues there too.
    As a workaround, make sure that you allow only one group to be requested per request and reject the request outright if multiple groups are requested in a single request. You will need to buy in the business on this one.
    Have heard the grapevine that 12G which is in the pipeline would have entitlement based request engine and also would allow for modification of request data once the request is submitted.
    HTH,
    BB

  • OIM 11g - Approval workflows for disabled user accounts

    Hi,
    We have a scenario wherein a user will be created in OIM with a future start date resulting in a Disabled Untill Start Date user status. Once the user is created, we should let anyone submit a New Hire form for the user and the submitted form needs to be approved by the Manager. Once the Manager approves the form, the target accounts should get created with disabled status. These accounts should get enabled on the start date.
    As submission of New Hire Form is not a straightforward process, we came up with the following design.
    A dummy resource object corresponding to the New Hire Form will be created and can be requested for a newly hired person by anyone who has OIM access. An approval workflow will be configured for the New Hire Form Resource object and provisioning of target accounts will be based on Manager's approval for this resource object.
    However the challenge that we see with this design is, it wasn't possible to place a request for New Hire Form dummy resource object for a disabled user. But the requirement is to complete the New Hire Form submission process befor the user becomes active.
    How can these workflows be invoked for a disbaled user? Is there any other way to implement this requirement?
    Any kind of help/guidance is greatly appreciated.
    Thanks and Regards
    Deepa

    911709 wrote:
    If I create a dummy resource, called "Group Membership" for example, and use this to show the groups that are available in AD, how can I have the request be routed to different approvers? For example, group cn=HR Users,cn=Users,dc=company,dc=com needs to be routed to HR for approval. Group cn=IT,cn=Users,dc=company,dc=com needs to be routed to IT for approval. How can I change the approvers dynamically?
    Re: Spawning multiple approval tasks in parallel in OIM11g SOA Composite
    You can have dynamic task assignment in BPEL; where you defne a variable in the task assignment and update the variable with the approver group name before triggering the task assignment task. Check BPEL docs for same.
    If every group needs a different approver, and there are 5000 groups, can I make 5000 resources and use the built-in routing of approvals? Or, use the dummy resource approach and handle the management of the approvals in some other way.Just make one resource with one field attached to it which takes in the group name and handle approval in SOA by reading a lookup which has AD group to Approval Group mapping.
    >
    Thank you.-Bikash
    Edited by: Bikash Bagaria on Feb 18, 2012 1:00 AM

  • Multiple Approval Leave Request in Fiori

    Hello,
    Do we have multiple approval Leave request in Fiori and how do we enable it.
    In EHP7 portal we have multiple approval and Fiori app should be in synch with the same. However, I could not find any option to enable the multi-level approval for leave request in Fiori.
    Regards,
    Divya

    Hi Divya,
    Are you talking about, multiple levels of approval in approve leave requests app in Fiori.
    This totally depends on the workflow template you are using. If the workflow you use in your portal handles multiple approval, your approve leave request should allow the same too. Make sure you are getting the workitems in your sap inbox.
    Let us know if this is not what you are asking for.
    Regards,
    Tejas

  • GL Journal approval- Send notification to multiple approver

    Hello
    I want to send GL journal approval notification to multiple approver, once any of the approver approves the journal it should be removed from worklist of all approver. How can we acheive this?
    Pls help
    Thanks
    Avalon

    Hi
    What i am sure of is that you can have specific groups for your journal approval and each of the groups can have specific approvers.
    When i say the above line, i mean that you can have groups like Treasury, Finance and Payroll and each of them have their desiganated approvers.
    Then the level of journal preparer who can also fall to a specific group.
    Once the journal preparer belonging to a specific group prepares a journal, it will route to the journal approver belonging to the specific group.
    I am not sure about whether you can create approval groups and also if you send the journal for approver to multiple approver, than how the other approver will come to know that the journal is approved or rejected or whether has the other person taken any action - it will create dependencies between the 2 person and hence might create confusion.
    So i am not sure about the resolution for your question.
    But if the approach suggested by me matches your requirement, i can forward you the document which contains the step you need to do to achieve the functionality,
    Hope this helps.
    Thanks and Regards
    Manish Jain

  • Multiple approval for Oracle eAM Work request

    Can anyone confirm Oracle has standard functionality of sequentinal apprvoal process for eAM Work request.
    Our current Oracle eAM project has requirement of multiple approver for Work request. Multiple approver means sequential approval process. After first approver approves it should go to second approval and continues.
    I know Oracle eAM Work order has sequential approval process, but i want to know the same funcionality available for Oracle eAM work request as well. If Oracle has the functionality please provide the details.
    We are using Oracle R12 version.

    Hi;
    I suggest close your issue here as answered than move your issue Oracle Discussion Forums » E-Business Suite Archived Forums » SCM - Asset Lifecycle Management (ALM) which you can get more quick response
    Regard
    Helios

  • Multiple Approval on single document

    Friends,
    How we will handle multiple approval on single document.
    Thanks in Advance
    Sukhjinder Singh

    Dear Sukhjinder Singh,
    In SAP Business One approvals on Documents is performed via the Approval templates (Administration - Approval Procedures - Approval templates). One of the aspects of the Approval Templates is the 'Stages'. In the Stage tab of the Approval Template the Approval Stage is chosen. If more than one approver of a document is required then in the 'Approval Stage' the field 'No. of Approvals required' should be set to number of approvals which the document needs. For Example, if a Sales Order should be approved by 2 people then the field 'No. of Approvals required'  should be set to 2.
    It is also worth noting that more than 2 approvers can be listed as approvers and any 2 of these approvers can approve the document.
    To find out more about approval procedures in SAP Business One read the document "Approval Procedures in Release 2004 A" which can be found on the documentation resource centre at the following location
    Service.sap.com -> Channel Partner Portal -> Solutions -SAP Business One -> Support -> OnLine Support - Documentation  Resource Centre -> SAP Business One 2004 A -> How to guides.
    I hope this helps.
    Noreen

  • OIM 11g Approval Workflow Notification questions

    Hello.
    I am working with an OIM 11g approval workflow. The workflow will flow from one group to another, and if one user in each group approves it, it is approved. Because I assigned it to groups, the notifications are going to every user in each group.
    Is it possible to send a notification to only a single user within a group, instead of everyone? Does auto claim do this?
    Is it possible to send a different notification if the ApprovalTask is rejected versus approved?
    Thanks.

    If I understand correctly, you want to send the notification only to the user who has approved the request and not to all in the group. You can do it by NOT using the notification tab in the .task but by using EmailNotificationService after the .task in BPEL. There you can read the data from payload on who approved the request and can send the notification only to that user. Same way for rejects. You can configure that.
    1. After your .task completion you can have a decision box which can check the value for 'outcome' and then direct it to appropriate path for appropriate notification.
    or
    2. Based on outcome you can set the template in a variable and then in the notificationservice use that variable.
    -Bikash

  • How to activate multiple approval in time sheets

    Hi Experts,
    I have a business requirement where we require multiple approval of time sheets. The requirement is is such that either of the two managers or the director should be able to approve the time sheets of the consultants.
    We use project systems and we have assigned the director as the person responsible in the project and the managers for person responsible for the WBS elements and the consultants have been assigned to the WBS elements. As of now only the director can approve the time sheets of the consultants. (i.e the person responsible for the project). But we want the ability where the other 2 managers also to approve the time sheets.
    Your valuable inputs in your earliest are highly appreciated.
    Thanks in Advance
    Dasuni

    Hi Lucas,
    Thank you for replying  my query. We use cj20n to create the project and the WBS elements and assign a person responsible for the projects & as well as for the WBS element. These persons have been maintained in OPS6 along with their user ID
    Thanks in advance
    Dasuni

  • SP10 - multiple approver problem with CUP

    We have SP10 (patch 1) in our development system and cannot move forward to production because of a real show stopper.  I have currently reported this to SAP thru an OSS message (and it is in development) but would like to know if anyone else is having this issue with SP10.  (this happened even before applying patch 1)
    We have multiple approvers when creating NEW users or CHANGING users in CUP.  We have it configured to allow just one of the approvers to approve before going on to the next stage.  Since we put in SP10, CUP is requiring ALL approvers to approve the request before going on to the next stage.  We get the following message when one of the approvers approve the request:  Request no: 5020. is approved, pending for other Approvers. 
    I've seen this reported for UAR and SOD but not for CUP.  In fact, there is a fix for UAR in Patch 1 of SP10.  I applied this patch but it hasn't fixed the CUP issue.  I also don't have the issue when rejecting a CUP request, or when approving it through the configuration --> Request --> Administration screen (what I consider the Back-door since only security administrators get the configuration area).
    Thanks for your input.
    Peggy

    Christian,
    I totally agree with you.
    The good news is.... We installed SP11.1 and the multiple approver problem is fixed. 
    We have decided to leave our production system at SP8 until this system settles down a bit.  Of course, this means we can't use many of the new fixes and features (such as UAR).  We use our sandbox system to apply new support packs and do very rigorous testing.  And our DEV system is at SP8 too.
    Good Luck.
    Peggy

  • OIM 11g approval auditing

    Is there any way to query the database to show approvals / status for OIM 11g approval workflows? The goal is a report in BI Publisher.
    Thank you

    You can query SOA table, WFTASK and WFTASKHISTORY

  • Send activity to multiple approver in workflow

    hi experts,
    i have multiple approver at same level and have multiple leves say e.g. I have 3 levels of approval process and at each level there can be more than one approvers (same activity should go to more than one users).
    and activity should be complete only when all approvers take action on that.
    I had created a rule so that activity is going to multiple users for approval but the problem is when any one user takes some action on it, the activity is disappearing from all users inbox.
    points will be rewarded for useful ans.
    thanks.

    hi,
    thanks for reply.
    this is exactly what i wanted.
    but i have little problem in this case.
    i have created a multiline container element of type SWP_INITIA , and assign 2 User id's in initial value, and assign it in Miscellaneous.
    here the activity is going in second user's inbox for two times,
    insted of going into each user's inbox.
    please help to reslove this issue.
    thanks.

  • UWL Multiple approval

    Hi Gurus,
    Need some advice here. I have customized my XML file to include 2 new columns; Approve and Reject. It is a radio button option. My question is, how do i add a 'button' at the header level which will allow me to approve all workitems based on the radio button 'approved' selection made? Basically, i would like to approve have the option of multiple approval.
    I have gone through the standard configuration documents but i could not pin point the section that i am missing. Please advise.
    Regards

    Hi,
    Normally UWL iViews appears with radio button for each of the workitem in the list.
    It can be customized using Decision Views. For e.g. converting radio boxes to check boxes to enable
    mulitple choices etc.
    Look into Decision View configuration part of the UWL.
    Hope it will give some pointers.
    ~Vipin

  • Removing multiple approval year linkage

    For a project, it has multiple approval year for eg. 2008 and 2010 (Investment management) at diferent WBS elements level ,we need to remove 2008 and then proceed further to complete with 2010.

    Dear Suresh,
    After you finish to process the approval year carry forward (transaction IM27_REPEAT), you have to carry out capital investment program closure (transaction IM27_CLOSE)
    This way, the new and old measures (WBS elements) will only receive the budget from one investment program position
    Hope it helps
    Regards,
    Kealin

  • IRecruitment - Multiple approval WFs

    Dears,
    My customer is looking for multiple approval WFs when creating a vacancy, so as an example if he choose A scenario (Saudi as an example) --> it should take the recruiter/manager (vacancy initiator) to a particular approval group and if he choose B value (i.e. Local employees) ---> it should take him to another approval group and so on..
    Do you have something in mind? I know that I can add some lookup values in DFF segment but I don't know how can I link it through AME.
    Thanks in advance
    Akram

    Hi,
    If there is a way to identify these groups using existing vacancy fields like location etc, it may not be required to build a dff also.
    1. identify the field that supplies the required information (or a PL/SQL function that does the same using parameters passed from the existing fields)
    2. Create an AME attribute for this field
    3. Create conditions based on these attributes.
    4. Create rules that use these conditions and assign different approval groups as required.
    You can read any of the vacancy attributes including DFFs in the AME transactions.
    Hope that helps.
    Regards,
    Vinayaka

Maybe you are looking for

  • IPod not found after update to 9.0.3

    I updated my iTunes to the latest version (9.0.3)and ever since, I have not been able to sync my iPod. In fact, iTunes won't even recognize my iPod and when I conncet the iPod to my computer iTunes completely freezes. Also when I connect my iPod, my

  • Adobe CS4 will not install on new macbook pro [was: pro]

    Adobe CS4 will not install on new macbook pro. It is coming from my other macbook.

  • Error message received when downloading itunes?

    While trying to update my iPhone & iPad I was asked to download an update to iTunes.  I have tried 10 times and just keep getting an error code 2324.  Cannot find any information on it.  Does anyone know what is wrong?  Now the older version has been

  • Flash Gauge with multiple pointers (needles)

    I am trying to display three different values on a singular gauge. Can this be done using ApEx's built-in gauge functionality or via third party flash gauges? Any help or insight would be greatly appreciated.

  • How do use Playlists in order?

    Hello, I would like to know how to play songs in numerical order. I am playing chapters of the Bible and I want them to play in chapter order, not at random. Thanks!