OIM pending approval task under user

I have question regarding OIM
we have 2 level approval workflow for provisioning responsibility to user. 1st level is Manager and 2nd is Business Owner. Say if the user submit request for a responsibility and it is approved by the user's manager. Its then submitted to Business owner. But say that business owner gets changed.
this what is happening
all the request for previous business owner are copied to new business owner, then he can approve/reject them. But the pending task under old business owner is still there. he/she can still approve or reject. Client want to remove this pending approval from the old business owner.
** Please note -- Business owner is a group which has a user.

Pending Tasks works in the following manner:
- User : Any task assigned to a user remains to be visible under its pending tasks unless re-assigned to someone else by the user/admin.
- Group : Any task which is assigned to a group would not directly come to the user work flow. Whenever you login to OIM, the system checks all your groups and then do a smart calculation for these assigned tasks. So if the user is removed from a group then it would not see these tasks anymore.
Now for your case, the Group=Business Owner itself is changed. So for new requests the assignment would be to done to the new group but existing tasks remains in the work-flow of the older group, if still required them you might want to re-assign it using OIM API's.
Thanks
Sunny

Similar Messages

Reject Pending Approval Tasks when Manager changes

Folks,
I have a requirement , when the user's manager change , i need to reject all the pending approval tasks for that particular user whose manager has changed , not others pending tasks .
Please let me know if anyone has implemented such a requirement .
I'm thinking of writing the logic in Change Manager task in xellearte user prov process , so when manager will change this task will trigger and in this task i will get all the pending approvals by using the 'getPendingApprovalTasksAssignedToUser' but i'm not sure how to identify the user who was the beneficiary of the task .
Thnx
Sid

We are using 11.1.1.5 with BP03.
Question - An OIM user can raise requests which can be routed to its manager for approval. The manager may manage more than one subordinate and will have approval tasks for requests raised by all his subordinates. If one of the subordinate's manager changes, tasks assigned to old manager for that subordinate should be rejected. All other tasks assigned to this manager by other subordniates should still be active. Can we fetch tasks assigned to a manager for a particular subordinate?
APIs do give me all the tasks assigned to a user but can we filter them to fetch tasks related to only one beneficiary without fetching all and then iterating through all to get desired result?

Flexible Title for Approval Tasks

Hi,
my current customer wants all approval tasks to be sent to the approver as well as to all delegates that the approver has specified. This means that the approval task shows up in the todo tab of multiple users. These users now need to be able to find out who actually has to approve such a request in the first place and who received that request only because he has been specified as a delegate.
In order to implement this, we would need to be able to customize the Display name of a task so that we can display information that is depedent on the request.
Does any know whether this is possible? I tried to add variable names such as %MSKEYVALUE% to the Display name, but this didn't work.
Best regards
Holger

Hi Holger,
Is the approval task a User decision step or an actiivity step?
In any case save the actual approver in a workflow container (say 'Approver'). Now:
1. If it is a User decision, set the container as parameter 1 in the step. and in the Title put say to be approved by &, where & serves as the place holder for the parameter.
2. If it is an activity, Pass the worklfow container into the task container of the activity ( Define one task container for this purpose) and call the container in the work item text.
I hope this solves your issue.
Regards,
Sankar

Need sql query to get OIM request pending approval details for one user

HI OIM Guru,
It would be great help if someone can provide me sql query by which i can find out how many requests are pending for approval for one user ?

1. Below query will give you status of all the request.
SELECT REQ.REQUEST_ID , REQ.REQUEST_STATUS FROM REQUEST REQ
2. You can have following status
Obtaining Operation Approval
Obtaining Template Approval
Operation Approval Approved
Operation Approval Rejected
Post Operation Processing Initiated
Request Approval Rejected
Request Closed
Request Completed
Request Created
Request Failed
Request Withdrawn
Template Approval Rejected
3. Now prepare the query from above sapmle, the requset status string should not contains foloowing values.
Rejected
Failed
Closed
Withdrawn
Completed
The builded query will give you the desired result for 11g
for 10 G
Get the OST_STATUS from Req table, and do you logic above stated
-Kuldeep
Edited by: Kuldeep on May 22, 2012 1:04 AM

OIM 11g, Get users from table and insert them into Approval Task

Hi All,
I have OIM 11.1.1.5.4 in Solaris 10 and I have an Oracle Table configured as Trusted Source.
I am using Database_App_Tables_9.1.0.5.0 connector.
I want Reconciliate new users from a Oracle Table as follow:
1. I ran the scheduled job
2. The new users reconciled Must get into an Approval Task before of insert them into USR Table.
3. The Administrator User Approved o Rejected the new users.
4. The new users that were approval Must insert them into USR Table.
Is there any form of implement this?, Can you guide me please?.
Thanks for your Help.

Through your Schedule Task, generate "*Create User*" (Request Type) request and assign approval workflow for such requests.
After completion of approval ONLY, users will get created into OIM 11g.

Customizing OIM request or approval task pages

Hi,
I need help in changing the layout of a particular screen in OIM 11g R1. Below is the scenario:
User submit request.
Request is assigned to corresponding manager(s).
If request is assigned to multiple managers, one of the managers will ‘Claim’ the request.
Manager opens the request details and click on ‘Additional Information’.
Request is again assigned back to requester.
Requester will open the request from ‘Approval Task’ to submit additional information to approver.
In this page, request is divided into two parts i) Basic details, Additional Request details, Request information ii) Role/Request details.
By default, ‘Additional Request Information’ response section can be completely viewed using scrollbar OR can be dragged down. But our requirement is to align the page such that no adjustment should be made to page to view complete content of the page. Can anyone let me know how to do this? I wanted to know in which request/approval task ADF pages files (JSFF) are available to customize. I could see only user page (JSFF) to customize, but not related to request/approval task pages.
- Kalyan Mutya.

Pending Tasks works in the following manner:
- User : Any task assigned to a user remains to be visible under its pending tasks unless re-assigned to someone else by the user/admin.
- Group : Any task which is assigned to a group would not directly come to the user work flow. Whenever you login to OIM, the system checks all your groups and then do a smart calculation for these assigned tasks. So if the user is removed from a group then it would not see these tasks anymore.
Now for your case, the Group=Business Owner itself is changed. So for new requests the assignment would be to done to the new group but existing tasks remains in the work-flow of the older group, if still required them you might want to re-assign it using OIM API's.
Thanks
Sunny

OIM 9.1.0.2 Pending Approval Page

Hello Gurus,
In OIM 9.1.0.2, when creating a new request for a resource that includes several instances of the same resource(like AD1 , AD2), it is impossible to distinguish each of them, and its status, since their data is not shown.
For the approval user, when he is approving the pending request on the Pending Approvals Page, it is impossible to know the data included in the those instances he is approving, it just shows AD User for both the instances(AD1, AD2)
Is there some way to achieve this , so that the approver can distinguish between the two instances he is approving.
Please let me know what is the best way to address this requirement.
Any help is appreciated.
Thanks in Advance

You are correct. If you pre-populate, it will be the requester. The requester would need to manually populate the field during the request with the requestee information. And there is only one form available. You can however, after submission of the request, get the request data, parse the Consolidated Request Data to determine the id's in the request field, and then return appropriate responses to trigger the tasks needed. This will still be a problem in the long run because you can't change the requestee information for each approval task. You're pretty much out of luck on this one.
-Kevin

Auto Approval of Self User Registration Fails OIM 11g R2

Use Case : Auto Approval of Self User Registration
Steps followed
1. A New Approval Policy created with Auto Approval flag set as True for Request Level Approval.
2. A New Approval Policy created with Auto Approval flag set as True for Operation Level Approval.
3. The field Organization was pre populated using the Pre Population Adapter, as mentioned below.
+<AttributeReference name="Organization" attr-ref="act_key" type="Long" widget="ENTITY" length="256" required="false" available-in-bulk="false" entity-type="ORGANIZATION">+
+<PrePopulationAdapter name="OrgPrepopulateAdapter" classname="com.plugin.OrgPrepopulateAdapter"/>+
+</AttributeReference>+
4. A new user was created using the "Register New user" Link.
5. Log in as System Adminstration and under Track requests, found that the New request has failed.
6. On click of Request link, the request details shows the Organization field has populated with the expected value.
7. The Logs suggests that the Request failed due to Organization field going Null.
LOG
[2013-02-12T15:50:39.138+05:30] [oim_server1] [ERROR] [] [oracle.iam.request.impl] [tid: [ACTIVE].ExecuteThread: '7' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: oiminternal] [ecid: e171ff3c1743d36a:6c2e4f90:13ccdc4a231:-8000-00000000000006f8,0] [APP: oim#11.1.2.0.0] Exception thrown java.lang.IndexOutOfBoundsException: Index: 0, Size: 0
[2013-02-12T15:50:39.138+05:30] [oim_server1] [ERROR] [] [oracle.iam.request.impl] [tid: [ACTIVE].ExecuteThread: '7' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: oiminternal] [ecid: e171ff3c1743d36a:6c2e4f90:13ccdc4a231:-8000-00000000000006f8,0] [APP: oim#11.1.2.0.0] Exception thrown Index: 0, Size: 0[[
java.lang.IndexOutOfBoundsException: Index: 0, Size: 0
     at java.util.ArrayList.RangeCheck(ArrayList.java:547)
     at java.util.ArrayList.get(ArrayList.java:322)
     at oracle.iam.requestactions.approval.operationlevel.OrgBasedMethodology.getOrgDetails(OrgBasedMethodology.java:215)
-------------

Use Case : Auto Approval of Self User Registration
Steps followed
1. A New Approval Policy created with Auto Approval flag set as True for Request Level Approval.
2. A New Approval Policy created with Auto Approval flag set as True for Operation Level Approval.
3. The field Organization was pre populated using the Pre Population Adapter, as mentioned below.
+<AttributeReference name="Organization" attr-ref="act_key" type="Long" widget="ENTITY" length="256" required="false" available-in-bulk="false" entity-type="ORGANIZATION">+
+<PrePopulationAdapter name="OrgPrepopulateAdapter" classname="com.plugin.OrgPrepopulateAdapter"/>+
+</AttributeReference>+
4. A new user was created using the "Register New user" Link.
5. Log in as System Adminstration and under Track requests, found that the New request has failed.
6. On click of Request link, the request details shows the Organization field has populated with the expected value.
7. The Logs suggests that the Request failed due to Organization field going Null.
LOG
[2013-02-12T15:50:39.138+05:30] [oim_server1] [ERROR] [] [oracle.iam.request.impl] [tid: [ACTIVE].ExecuteThread: '7' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: oiminternal] [ecid: e171ff3c1743d36a:6c2e4f90:13ccdc4a231:-8000-00000000000006f8,0] [APP: oim#11.1.2.0.0] Exception thrown java.lang.IndexOutOfBoundsException: Index: 0, Size: 0
[2013-02-12T15:50:39.138+05:30] [oim_server1] [ERROR] [] [oracle.iam.request.impl] [tid: [ACTIVE].ExecuteThread: '7' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: oiminternal] [ecid: e171ff3c1743d36a:6c2e4f90:13ccdc4a231:-8000-00000000000006f8,0] [APP: oim#11.1.2.0.0] Exception thrown Index: 0, Size: 0[[
java.lang.IndexOutOfBoundsException: Index: 0, Size: 0
     at java.util.ArrayList.RangeCheck(ArrayList.java:547)
     at java.util.ArrayList.get(ArrayList.java:322)
     at oracle.iam.requestactions.approval.operationlevel.OrgBasedMethodology.getOrgDetails(OrgBasedMethodology.java:215)
-------------

'No Details' error when tying to appen approval task from oim page -11GR2

Hi all,
I am using RequestService service of oim API for triggering Remove Role request. Request is being triggered succesfuly, and approval task is being assigned to the right person. But when I try to open the task I get 'No Details Available For the Task' message in apopup. I tried to open it from the worklist application but there is the same error. What may be wrong? Any Help is strongly appreciated...
Code snipped I use is below:
OIMApiHelper helper = new OIMApiHelper();
User user = helper.findUserByReconKey(userReconKey);
String userKey =user.getEntityId();
RoleManager roleManager = Platform.getService(RoleManager.class);
RequestData requestData = new RequestData();
RequestService reqsrvc = Platform.getService(RequestService.class);
requestData.setJustification(" Remove Roles");
ArrayList<RequestBeneficiaryEntity> entities = new ArrayList<RequestBeneficiaryEntity>();
List<Role> userRoles = roleManager.getUserMemberships(userKey,true);
for(int i=0; userRoles!=null && i<userRoles.size();i++){
Role role = userRoles.get(i);
String roleKey = role.getEntityId();
String roleName = role.getName();
if(roleName.endsWith("ALL USERS")){
continue;
log.info("Benificiary Key (Role ID) ->"+roleKey);
log.info("Benificiary Name (Role Name) ->"+roleName);
RequestBeneficiaryEntity ent1 = new RequestBeneficiaryEntity();
ent1.setRequestEntityType(oracle.iam.platform.utils.vo.OIMType.Role);
ent1.setOperation(RequestConstants.MODEL_REMOVE_ROLES_OPERATION);
ent1.setEntitySubType(roleName);
ent1.setEntityKey(roleKey);
entities.add(ent1);
if(entities.size()==0){
return;
Beneficiary beneficiary = new Beneficiary();
beneficiary.setBeneficiaryKey(userKey);
beneficiary.setBeneficiaryType(Beneficiary.USER_BENEFICIARY);
beneficiary.setTargetEntities(entities);
List<Beneficiary> beneficiaries = new ArrayList<Beneficiary>();
beneficiaries.add(beneficiary);
requestData.setBeneficiaries(beneficiaries);
//submit request
String reqId = reqsrvc.submitRequest(requestData);
BR,
Aliye

He is talking about the configuration which you did at the time of OIM Installation.
Verify:
Login into EM > System Mbean Browser > Application Defined Mbean > oracle.iam > oim_server1 > oim >Config > XML Config.Discovery > Discovery

How to get details of Pending Approval request in OIM 11g R2?

Hi,
We need to find out following details from Pending Approval Request in OIM 11g R2 -
Request ID,Assignees,Requested Resource Name, Title of Request, Beneficiary, Status of Request.
Out of above attributes we could find out Assignees, Title of Request, Status of Request, Beneficiary, etc. But we are not getting Request ID and Requested Resource Name.
We have used API - 'IworkflowServiceClient'
If we use API - 'RequestService' then we are not getting Assignees and Resource name from Pending approval request.
Can any one suggeste how can we get these details? Do we need to use other API or other alternative to get all of attributes from Pending Approval Request.
Thanks.

Thanks Kevin for your suggestion.
In OIM 11g R2 I tried task.getIdentificationKey() to get Request ID and task.getSystemMessageAttributes().getTextAttribute6() to get requested resource name but I am getting null values out of it. Is there something I am missing?
Which common thing I can use to retrieve data from both OIM and SOAINFRA? As I am not getting Request ID from 'IworkflowServiceClient' API so I could not use it to earch request in OIM using 'RequestService'. Even if I have to use query what will be common thing I can use to fetch data from both tablespaces?
Thanks.

Setting dynamic user in Approval task

While setting the user at runtime for approval task, I have created a Task Assignment adapter and associate the adapter in the assignment tab for the approval task. I have used reassignApprovalTasksToUser method of tcRequestOperationsIntf class. I have passed the task instance id as well as the user key. From the system console I am able to find that the adapter is invoked.
I have suppress the standard approval process using tcComplete task adapter.
When the requestor make the request and goto approval details page the system is showing the request is pending to the re-assigned user however when I login into the console using re-assigned user credential no request is pending in his work busket. What I observed, the request is pending in xelsysadm work busket.
Would appreciate if someone let me know the step which I am missing.

Yes, I suppressed the "Approve" Task in standard approval process.
Can you please let me know how to mapped the key type in the task assignment adapter.
I have created two variables in the adapter and mapped those two variables from the assignment tab of the approval task.
I have seen there are two more variables in the Adapters, "Adapter return value for Key type" and "Adapter return value for Key" and these two adapter variables are mapped as "Set at runtime".
How do I map these two variable?
No I do not find any exception with regard to execution of the task assignment adapter in the log.

Custom Event Notification (email) for Approval Tasks in OIM 11g

Hi,
how to create event notification for approval tasks in OIM 11g. I mean how to send email notification to user who sholuld accept or reject approval task?
best
mp
Edited by: J23 on 2011-05-30 04:08

Here is the documentation http://download.oracle.com/docs/cd/E21764_01/integration.1111/e10224/bp_notif.htm#SOASE548
Search for SOA BPEL Email Notifications for more information:
http://soa-bpel-esb.blogspot.com/2010/01/email-notification-in-bpel.html
http://download.oracle.com/docs/cd/B31017_01/core.1013/b28764/bpel013.htm
There are many more search links that can help you out.
-Kevin

User completes approval task but system is not marking it completed

My SP designer workflow has intermittent issues completing the task after the users does their part. We've taken one of the web servers out due to the thought that the sessions were getting split up (IIS logs showed this happening) between the
two servers, but the issue resurfaced today. This user completed one task no problem, but when he completed the next task shortly after the system didn't finish up the second task so it 'stalls' (that's what I call it). The stalled task
doesn't get completed so the workflow doesn't move on. I'm out of ideas.
I've searched but can't find any reference to this behavior with approval tasks. It is pretty straightforward OOTB approval processing but has intermittent issues.
Anyone??
thanks - Carlene

Hi Victoria,
Thank you for your reply. Here are the responses to your questions:
No, there are no errors in the workflow when the task is not completed. I've turned on versioning in the task list and versioning shows the user modifying the task but the 3rd step of the system marking the task complete isn't occurring.
No, the issue occurs intermittently which has made it almost impossible to figure out the cause.
Creating a new approval workflow with the exact steps is really labor intensive unless we copy and modify it. This has not been done.
We've been looking at the ULS logs and the Workflow trace logging and what we recently discovered is an Access Denied error which has been narrowed down to a possible expired User-token and look-up to another domain by the initiator's ID. All of our
users are in domains other than the domain the SharePoint servers are in but there are two way trusts established. We have since moved the approval processing step into an Impersonation step in the workflow which runs under the system account.
We are now watching and waiting to see if this will help.
Another thing to note is all our users are granted access to SharePoint through AD groups which are then added to SharePoint groups.
We are working with Microsoft on this and hopefully we can get it resolved. When we do I will post the outcome, in the meantime I welcome any other suggestions.
Thanks - Carlene
Carlene S.

OIM 11g - Email Notification with direct link to Approval Task Details

Hi,
We wanted to send email notifications to approver with direct link to the approval task details screen from which the user can either approve or reject the request. In OIM 11g OOTB Notification templates such as Request Creation contains the direct link to Request Detail screen which is something like
http://localhost:14000/oim/faces/pages/Self.jspx?OP_TYPE=LOOKUP;E_TYPE=MY_REQUEST&T_ID=65
Wondering if there is something similar for Approval Task Details screen as well.
Any kind of help or suggestion is greatly appreciated.
Thanks,
Deepa

If at all you cannot get the direct link for approve/reject then try the actionable email from SOA. Once you have that configured the emails gets approver/reject links so that approvers can directly approve/reject the task from email. If that works for you then you can look at the format of those links in the email and deduce what you need the url as.
HTH,
BB

OIM 11g - Approval workflows for disabled user accounts

Hi,
We have a scenario wherein a user will be created in OIM with a future start date resulting in a Disabled Untill Start Date user status. Once the user is created, we should let anyone submit a New Hire form for the user and the submitted form needs to be approved by the Manager. Once the Manager approves the form, the target accounts should get created with disabled status. These accounts should get enabled on the start date.
As submission of New Hire Form is not a straightforward process, we came up with the following design.
A dummy resource object corresponding to the New Hire Form will be created and can be requested for a newly hired person by anyone who has OIM access. An approval workflow will be configured for the New Hire Form Resource object and provisioning of target accounts will be based on Manager's approval for this resource object.
However the challenge that we see with this design is, it wasn't possible to place a request for New Hire Form dummy resource object for a disabled user. But the requirement is to complete the New Hire Form submission process befor the user becomes active.
How can these workflows be invoked for a disbaled user? Is there any other way to implement this requirement?
Any kind of help/guidance is greatly appreciated.
Thanks and Regards
Deepa

911709 wrote:
If I create a dummy resource, called "Group Membership" for example, and use this to show the groups that are available in AD, how can I have the request be routed to different approvers? For example, group cn=HR Users,cn=Users,dc=company,dc=com needs to be routed to HR for approval. Group cn=IT,cn=Users,dc=company,dc=com needs to be routed to IT for approval. How can I change the approvers dynamically?
Re: Spawning multiple approval tasks in parallel in OIM11g SOA Composite
You can have dynamic task assignment in BPEL; where you defne a variable in the task assignment and update the variable with the approver group name before triggering the task assignment task. Check BPEL docs for same.
If every group needs a different approver, and there are 5000 groups, can I make 5000 resources and use the built-in routing of approvals? Or, use the dummy resource approach and handle the management of the approvals in some other way.Just make one resource with one field attached to it which takes in the group name and handle approval in SOA by reading a lookup which has AD group to Approval Group mapping.
>
Thank you.-Bikash
Edited by: Bikash Bagaria on Feb 18, 2012 1:00 AM

OIM pending approval task under user

Similar Messages

Maybe you are looking for