IOM - approval

Similar Questions

• No emails sent by the IOM approval process

  Hello

  We have a problem with the mail notifications sent from the element of human task of a BPEL workflow approval in OIM 11 g R2 (SOA 11 g R1):

  On one of our circles of IOM, no approval notification is sent at all, even if they are correctly configured in the element of human task corresponds to the composite SOA. Notifications are sent correctly on another installation of the IOM that uses exactly the same composite.

  There is no trace of the IOM and SOA even try to send these messages, that they appear at all in the "State of the Message page" of the section of the mail Service of the Enterprise Manager user (not even in a "failed" State).

  We already checked:

  • AdminServer, SOAServer, OIMServer and area newspapers (they show no unusual)
  • The composites themselves (identical on both facilities)
  • The configuration of email from UMS driver (identical on both facilities)
  • The JpsContextName in the SDPMessagingServerConfig MBean and jps-config. XML (identical on both facilities)

  What are we missing that could be the cause of this problem?

  Thank you very much!

  Configure you the messaging part and turn notifications on the server SOA?

  In enterprise manager, right-click of your soa server instance, under Administration of SOA, select properties of Notification Workflow.  From there set the Notification Mode and the emails below.

  -Kevin

• Policies for approval 11g IOM - approval rule to check the Connection Manager

  Hello
  
  I have a requirement in which if the applicant of a resource is a Manager, while demand should automatically be approved. However if the applicant is one person other than the owner, then it should be assigned to the Manager for approval. Is it possible to do this verification in the approval rule?
  
  My idea was to create two trust policies for the same resource with a single policy with auto approve activated if the connection applicant is same as connection of eating of the beneficiary and other policies with the default approval process BeneficiaryManager if the connection of the applicant is different from the connection of the beneficiary. I don't know if the approval rule can be configured to check these values during execution.
  
  Any kind of help/suggestion is greatly appreciated.
  
  Concerning
  Deepa

  To do this, you change the task of bpel and specify the condition to jump for the task. In the rule to jump, you must specify if the applicant is responsible for the user (the two values that you get in the payload). Set it up this way auto approve request to the Manager.
  Also be sure to affect the outcome of the BPEL task of condition of approval so that IOM does not wait for the State.

  HTH,
  BB

  Published by: bbagaria on Sep 9, 2011 05:36

• IOM approval workflow

  Hi all
  I try to call a custom adapter when a user changes their profile (for example, the first name) of the IOM.
  
  I changed the process of 'user profile Edit"- does"pending approval given"process not conditional, to configure the workflow approval task. Now, whenever a user changes their profile, the request goes to xelsysadm for approval and once approved by xelsysadm, the profile is updated.
  Also, I have traced task of my custom in the USR_PROCESS_TRIGGERS adapter process so that whenever the name is updated, my task of process is called.
  
  Now, EVERYHING works as you want, but I'm not able to get information from the author of the request of my custom adapter. Please let me know how I can extract the information from the requestee.
  
  Thank you

  Create a task in process of definition of profile edit approval process and call on the success response of the task in process "pending approval Data.

  In your case, its does not work as information of the applicant for approval in not available when your field updated task is trigger for research process_triggers.

  HTH

• IOM approval process

  Hi people,
  
  I need to implement the scenarios for approval.
  
  (1) resources admin is expected to approve before the resource is put into service.
  
  (2) If a Director of resources creates a user in the IOM, the establishment must be approved by IOM Admins.
  
  Please suggest how to do these
  
  Thank you
  M

  Go to definition of process Standard of approval. It will be the task approved. Go to integration and attach tcComplete it.

  BDW if you see it shows which means approval it task show that is underway with XELSYSADM?

  Approve or something else?

• Cannot open Workflow rules of approval in OIM 11 g R2 PS3

  Hi all

  When I clicked on workflow-> screen sysadmin IOM approval button, empty page is opened.

  When I open the newspapers with Trace: 32, diagnostic log file a below the error log.

  You have an idea about this error?

  How can I solve this problem?

  ------------------

  [2016 02-04 T 15: 20:26.672 + 02:00] [WLS_OIM1] [TRACE] [] [oracle.adf.share.ADFContext] [tid: [ASSETS].] [ExecuteThread: '19' to the queue: "(self-adjusting) weblogic.kernel.Default"] [username: xelsysadm] [ecid: 986ee303cfcde60f:4d7a1bd9:152a60fcce3:-8000-000000000000da49, 0] [APP: oracle.iam.console.identity.sysadmin.ear #V2.0] [IDDM: 0000LAgF6St4ykW_Px ^ Ayd1MgQs700000C] [SRC_CLASS: oracle.adf.share.ADFContext] [SRC_METHOD: getADFFacesViewScopeMap] oracle.adf.view.rich.context.AdfFacesContext allows for the ViewScope

  [2016 02-04 T 15: 20:26.675 + 02:00] [WLS_OIM1] [TRACK: 32] [] [oracle.adf.share.ADFContext.allocationLogger] [tid: [ASSETS].] [ExecuteThread: '19' for queue: "(self-adjusting) weblogic.kernel.Default"] [userId: xelsysadm] [ecid: 986ee303cfcde60f:4d7a1bd9:152a60fcce3:-8000-000000000000da49, 0] [APP: oracle.iam.console.identity.sysadmin.ear #V2.0] [IDDM: 0000LAgF6St4ykW_Px ^ Ayd1MgQs700000C] [SRC_CLASS: oracle.adf.share.ADFContext] [SRC_METHOD: logDiagnosticsInternal] > > recorder invoked distribution: BUFFER EXCEEDED, STARTING OVER [[] memory ALLOCATION

  The value of Count = 1 Delete Count = 1

  > > Distribution batteries:

  > > > > The value ADFContext:

  External context:

  [Context: ServletContext@1995135651[app:oracle.iam.console.identity.sysadmin.ear module: sysadmin path: / sysadmin spec-version: 2.5 version: V2.0]

  Request: weblogic.servlet.internal.RequestEventsFilter$EventsRequestWrapper@2d1c4351

  Discussion: Thread [[ACTIVE] ExecuteThread: '19' for queue: "(self-adjusting) weblogic.kernel.Default", 5, pooled discussions]

  java.lang.Thread.getStackTrace(Thread.java:1589)

  oracle.adf.share.ADFContext.storeAllocationStack(ADFContext.java:1523)

  oracle.adf.share.ADFContext.setAsCurrent(ADFContext.java:1463)

  oracle.adf.share.http.ServletADFContext.initialize(ServletADFContext.java:470)

  oracle.adf.share.http.ServletADFContext.initThreadContext(ServletADFContext.java:420)

  oracle.adf.view.page.editor.webapp.WebCenterComposerFilter.doFilter(WebCenterComposerFilter.java:88)

  weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)

  oracle.adfinternal.view.faces.webapp.rich.RegistrationFilter.doFilter(RegistrationFilter.java:133)

  org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$ FilterListChain.doFilter (TrinidadFilterImpl.java:478)

  oracle.adfinternal.view.faces.activedata.AdsFilter.doFilter(AdsFilter.java:60)

  org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$ FilterListChain.doFilter (TrinidadFilterImpl.java:478)

  org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl._doFilterImpl(TrinidadFilterImpl.java:303)

  org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl.doFilter(TrinidadFilterImpl.java:208)

  org.apache.myfaces.trinidad.webapp.TrinidadFilter.doFilter(TrinidadFilter.java:92)

  weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)

  oracle.iam.ui.platform.servletfilter.IdentityContextFilter.doFilter(IdentityContextFilter.java:52)

  weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)

  oracle.adf.library.webapp.LibraryFilter.doFilter(LibraryFilter.java:180)

  weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)

  oracle.iam.ui.platform.view.authz.filter.AdvancedConsoleAccessFilter.doFilter(AdvancedConsoleAccessFilter.java:127)

  weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)

  oracle.iam.ui.platform.servletfilter.OIMRedirectValidatorFilter.doFilter(OIMRedirectValidatorFilter.java:139)

  weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)

  oracle.security.jps.ee.http.JpsAbsFilter$ 1.run(JpsAbsFilter.java:138)

  java.security.AccessController.doPrivileged (Native Method)

  oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:324)

  oracle.security.jps.ee.util.JpsPlatformUtil.runJaasMode(JpsPlatformUtil.java:464)

  oracle.security.jps.ee.http.JpsAbsFilter.runJaasMode(JpsAbsFilter.java:121)

  oracle.security.jps.ee.http.JpsAbsFilter.doFilter(JpsAbsFilter.java:211)

  oracle.security.jps.ee.http.JpsFilter.doFilter(JpsFilter.java:71)

  weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)

  oracle.security.wls.filter.SSOSessionSynchronizationFilter.doFilter(SSOSessionSynchronizationFilter.java:422)

  weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)

  oracle.dms.servlet.DMSServletFilter.doFilter(DMSServletFilter.java:163)

  weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)

  weblogic.servlet.internal.RequestEventsFilter.doFilter(RequestEventsFilter.java:27)

  weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)

  weblogic.servlet.internal.WebAppServletContext$ ServletInvocationAction.wrapRun (WebAppServletContext.java:3730)

  weblogic.servlet.internal.WebAppServletContext$ ServletInvocationAction.run (WebAppServletContext.java:3696)

  weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)

  weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)

  weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2273)

  weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2179)

  weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1490)

  weblogic.work.SelfTuningWorkManagerImpl$ WorkAdapterImpl.run (SelfTuningWorkManagerImpl.java:545)

  weblogic.work.ExecuteThread.execute(ExecuteThread.java:256)

  weblogic.work.ExecuteThread.run(ExecuteThread.java:221)

  > > > > Reset the ADFContext:

  Discussion: Thread [[ACTIVE] ExecuteThread: '19' for queue: "(self-adjusting) weblogic.kernel.Default", 5, pooled discussions]

  java.lang.Thread.getStackTrace(Thread.java:1589)

  oracle.adf.share.ADFContext.storeAllocationStack(ADFContext.java:1523)

  oracle.adf.share.ADFContext.removeAsCurrent(ADFContext.java:1500)

  oracle.adf.share.http.ServletADFContext.removeAsCurrent(ServletADFContext.java:674)

  oracle.adf.share.http.ServletADFContext.resetThreadContextScopes(ServletADFContext.java:669)

  oracle.adf.share.http.ServletADFContext.resetThreadContext(ServletADFContext.java:629)

  oracle.adf.view.page.editor.webapp.WebCenterComposerFilter.doFilter(WebCenterComposerFilter.java:160)

  weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)

  oracle.adfinternal.view.faces.webapp.rich.RegistrationFilter.doFilter(RegistrationFilter.java:133)

  org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$ FilterListChain.doFilter (TrinidadFilterImpl.java:478)

  oracle.adfinternal.view.faces.activedata.AdsFilter.doFilter(AdsFilter.java:60)

  org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$ FilterListChain.doFilter (TrinidadFilterImpl.java:478)

  org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl._doFilterImpl(TrinidadFilterImpl.java:303)

  org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl.doFilter(TrinidadFilterImpl.java:208)

  org.apache.myfaces.trinidad.webapp.TrinidadFilter.doFilter(TrinidadFilter.java:92)

  weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)

  oracle.iam.ui.platform.servletfilter.IdentityContextFilter.doFilter(IdentityContextFilter.java:52)

  weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)

  oracle.adf.library.webapp.LibraryFilter.doFilter(LibraryFilter.java:180)

  weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)

  oracle.iam.ui.platform.view.authz.filter.AdvancedConsoleAccessFilter.doFilter(AdvancedConsoleAccessFilter.java:127)

  weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)

  oracle.iam.ui.platform.servletfilter.OIMRedirectValidatorFilter.doFilter(OIMRedirectValidatorFilter.java:139)

  weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)

  oracle.security.jps.ee.http.JpsAbsFilter$ 1.run(JpsAbsFilter.java:138)

  java.security.AccessController.doPrivileged (Native Method)

  oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:324)

  oracle.security.jps.ee.util.JpsPlatformUtil.runJaasMode(JpsPlatformUtil.java:464)

  oracle.security.jps.ee.http.JpsAbsFilter.runJaasMode(JpsAbsFilter.java:121)

  oracle.security.jps.ee.http.JpsAbsFilter.doFilter(JpsAbsFilter.java:211)

  oracle.security.jps.ee.http.JpsFilter.doFilter(JpsFilter.java:71)

  weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)

  oracle.security.wls.filter.SSOSessionSynchronizationFilter.doFilter(SSOSessionSynchronizationFilter.java:422)

  weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)

  oracle.dms.servlet.DMSServletFilter.doFilter(DMSServletFilter.java:163)

  weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)

  weblogic.servlet.internal.RequestEventsFilter.doFilter(RequestEventsFilter.java:27)

  weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)

  weblogic.servlet.internal.WebAppServletContext$ ServletInvocationAction.wrapRun (WebAppServletContext.java:3730)

  weblogic.servlet.internal.WebAppServletContext$ ServletInvocationAction.run (WebAppServletContext.java:3696)

  weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)

  weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)

  weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2273)

  weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2179)

  weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1490)

  weblogic.work.SelfTuningWorkManagerImpl$ WorkAdapterImpl.run (SelfTuningWorkManagerImpl.java:545)

  weblogic.work.ExecuteThread.execute(ExecuteThread.java:256)

  weblogic.work.ExecuteThread.run(ExecuteThread.java:221)

  -------------------------------

  Thank you.

  Best regards.

  Try following:

  1)

  Workflow policies enabled

  Workflow policies enabled

  TRUE

  This property determines if the approval workflow is enabled or disabled in Oracle Identity Manager. Approval workflow is used to determine if the operation requires approval or not, and if approval is required, then what workflow must be invoked. If the value of this property is TRUE, the approval workflow is enabled. If the value of this property is FALSE, the approval workflow is deactivated. For detailed information about the approval workflow, see Chapter 4, "Managing workflows".

  (2) if the above does not fix, take a look at the thread below:

  Re: Approval Workflow rule in IOM 11.1.2.3

  ~ J

• BPEL human task Notification Email subject

  Hello
  
  I use SOA11.1.1.5, and I'm working on integration with the IOM for the approval workflow. I have question about notifications in the human task that is pending approval. I am able to edit the body of the email according to my needs, but I'm not able to change the subject of the e-mail. Currently, it is the message subject as ' Action required: approval 'then I want it to be something like' IOM: approval pending - < xxxx > < xxxx > task (request ID: < xxx >)'. All the "xxx" above is dynamic values that are in the payload, and I can use them to build the subject, but just that I do not see any place in the "Notifications" menu in the human task.
  Any idea anyone?
  
  Thank you
  BB

  In fact, I was able to make it work, but never had to post the answer. But just in case someone comes back looking for it, the solution of my notes:

  Workflow supports header customizations via "WorkflowCustomClasspathURL"
  The customized resource bundles can be packaged as a jar file and referred from WorkflowCustomClasspathURL.
  
  Follow the steps below to customize the EMAIL headers:
  
  1. Navigate to MW_HOME/Oracle_SOA1/soa/modules/oracle.soa.workflow_11.1.1
  2. From the library bpm-services.jar extract the following directory to a local location:
  oracle/bpel/services/workflow/resource
  Note:
  ----
  i. The reason, we extract these resource bundles from the SOA directory is to be sure that we have the latest properties.
  ii. Please make sure that the directory structure is maintained in the extracted folder
  
  3. Delete the class file i18NUtil.class from the extracted directory
  
  4. Make the following modifications in WorkflowLabels.properties
  a. To customize "Action Required"
  TASK_VIEW_CONTEXT_ASSIGNEE_ASSIGNED=Action Required
  to
  TASK_VIEW_CONTEXT_ASSIGNEE_ASSIGNED=Customized Action Required
  b. To customize "Routed"
  TASK_VIEW_CONTEXT_ROUTED=Routed
  to
  TASK_VIEW_CONTEXT_ROUTED=Action Required
  c. To customize "Completed to Approved" and "Completed to Rejected"
  Add
  TASK_VIEW_CONTEXT_ASSIGNEE_APPROVE=Approved
  TASK_VIEW_CONTEXT_ASSIGNEE_REJECT=Rejected
  
  5. Please repeat the procedure for any other languages by editing the appropriate translated WorkflowLabels_**.properties files.
  
  6. Zip back the entire folder into a jar file (say , customizedbundle.jar)
  
  7. The 'WorkflowCustomClasspathURL' parameter can be configured from the Enterprise Manager SOA Console.
  a. Expand SOA
  b. Right Click on soa-infra
  c. Go to Administration - System MBean Broswer
  d. Go to the following mbean:
  Application Defined MBeans
  - oracle.as.soainfra.config
  - Server: 
  - WorkflowConfig
  - human-workflow
  - WorkflowCustomClasspathURL
  e. Provide the path to customizedbundle.jar
  => file:///{path_to_customizedbundle.jar}
  f. Click Apply
  Note. Edit WorkflowCustomClasspathURL for each SOA Managed Server if you are using a SOA Cluste.
  
  8. Verify that the email subject contains the intended changes.
  

  More here

  Or now an article: 1420793.1
  -Marie

• Create the role attribute to a recipient user after user approval - IOM 11.1.2

  Hi all
  
  I ve created a composite custom for creation of the user. Once a user of the applicant (for example user-R, other than the xelsysadm) creates a user (say User1), he would go to approaval to the Manager of the applicant (say user-RM). Once the applicant manager approves the request, the user is created in the IOM.
  
  Now, once the user is created, I need to assign a role personalized the User1 by using APIs. For some reason, we will not use the role membership rule.
  
  
  My Situation
  ----------------
  -J' created a handler for post (for MODE = CRΘER) which generate custom "user login" and also assign a role personal to the user. Role was being entrusted "Beneficial user" if created by "xelsysadm", for, there was no approval triggered.
  
  But when I create one recipient user with other than 'xelsysadm', the workflow is triggered and role assignment is a failure in the event handler.
  
  Please suggest me a way to assign the role (using API) on the 'recipient user', once the application is approved by the assignee.

  See the Article: 1532267.1

  -Marie

• Custom in IOM 11.1.1.5 SOA approval stream

  I am a new bie to IOM and need to acquire a multi SOA approval flow level in IOM 11.1.1.5.
  
  Please give me some url or doc where I can get the detailed procedure.

  Detailed instructions are given in the below obe.

  http://www.Oracle.com/WebFolder/technetwork/tutorials/OBE/FMW/OIM/oim_11g/Custom_Approval_Process_for_Resource_Request/custom_approval_process_for_resource_provision.htm

• IOM 9.1.0.1:-create user with approval.

  Guru, Experts,
  
  I am currently using IOM 9.1.0.1, and I want to create the user features to be working with approval. Whenvr a user or xelsysadm attempts to create the user and it must then ask for approval/Rejact then only it will create or deny the operation.
  
  Thank you
  Hemant.

  (1) create a dummy resource, say 'CREATE the RESOURCE USER IOM'... It should be of type 'Order of the organization' and not 'Order for User. Create a model organization, such as CREATE USER ORGANIZATION or better ORGANIZATION OF USER OPERATIONS too for the sole purpose of acceptance of the application.

  In the form of resources either in the form of object, take all required attributes such as user login, first name, last name, organization etc.

  (2) establish an approval process: say "assign system Admin Approval '.

  (3) in the assignment tab, assign the task to the Group--> SYSTEM ADMINISTRATOR (or any other group of your business condition)

  Optionally, you can even send emails too.

  (4) in the process of commissioning, in the stream, flow, the shape of the object in your process.

  (5) in the "Create a user" task, call tcUserOperationsIntf.createUser () and pass all from processes form...

  (6) raises 'request '... Fill in the data... And then approve it... The user must be created...

  (7) in the CREATE USER ORGANIZATION profile resource, the IOM CREATE USER the RESOURCE and the process shape shows all the attributes of the user.

• How to read the approval tasks of his application by the IOM by using the API?

  Hello
  Is there a way to read task approval and State corresponding with the IOM i.e. APIs If your workflow includes two levels of approval, the approval tasks would be: 1. approval of the Manager and 2. Permission of owner role?
  
  I was looking at the API documentation. but it did not help, all I could find is to read the steps and the status of each step, i.e. request level, level gauge and operation?
  
  
  Thank you
  Coralie

  link below will help you locate BPEL worklist API

  http://technology.AMIS.nl/Blog/1496/invoking-BPEL-worklist-API-from-remote-server-with-Java
  http://docs.Oracle.com/CD/E12839_01/integration.1111/e10224/bp_worklistcust.htm

• IOM 9.1.0.1 selection of approval workflow

  Hello
  
  I need help on how to configure rules for the determination of the process for IOM 9.1.0.1
  
  I have two processes of approval and the shape of the object (it requires an approval and the two other approvals). I would like to be able to decide, during execution, what approval process should be triggered using the rules of determination of processes based on the shape of object data.
  
  I created two rules for determining process as follows:
  
  Rule1:
  Type: Determination of the process
  Subtype: approval
  Re: Name of the resource
  Process: Name approval process 1
  Rule: Name of the field in the shape of the object is equal to true
  
  Rule 2:
  Type: Determination of the process
  Subtype: approval
  Re: Name of the resource
  Process: Name approval process 2
  Rule: Name of the field in the shape of the object is equal to false
  
  The problem I have is that IOM seems to ignore these rules. I think it might be related to the fact that I am unable to leave the two approval process with the field 'by default the process' unchecked. If I try to uncheck and save, it gets checked again.
  
  
  According to me, I'm missing something here, and I can't find any documentation on how to configure rules of decision-making, in official documentation or Metalink.
  
  Advice would be appreciated.
  
  Thank you

  Once you create these rules, go to the resource object. There is a tab for the process. Add your rules here. Then it checks these rules and determine which exploit to use.

  -Kevin

• Set if the users or business owner may approve of their own queries-IOM

  I have a scenario where if a user replaces his manager as an agent and made a request for a resource, the approval triggered task goes to the user and the user can approve. I want to disable this feature.
  
  I was told that BP12 having been applied, IOM, allows us to define if the users or business owner can approve their own requests. Is this possible and if yes then how to on this subject?
  
  Thanks in advance.

  By BP11 for 10g IOM documentation:

  9649346 a user could approve or update the user's request. This function could not be disabled. Of from this release, this feature can be enabled or disabled according to your requirement.

  See Section 3.10, "using the XL. AllowBeneficiaryToApprove system property"for more information on the implementation of the correction to this article. >

  It is also present in BP11:

  9271449 applicants may reassign tasks for approval to themselves.

  See Section 3.9, "using the XL. RequesterCanBeApprover system property"for more information on the implementation of the correction to this article. >

  System in 10g configuration variables are in the console design. 11g, they are part of the web console.

  -Kevin

• Approval of IOM / provision of workflow

  Hi all
  I have a question regarding the approval of IOM / provision of workflow.
  
  Application of X (e.g. Active Directory) has an OOTB connector which can available to the user and manage its role in enforcement. The user can trigger the request for change of role through the console of administration of IOM.
  
  My query - Can I configure access policy/user group for the creation of a database the X application user identity. This will create identities of user for all users in application X without roles. Later user must be able to pray for roles and approval, to update its role in the X application.
  
  Can this scenario can be implemented with any connector OOTB, with supply and role workflow approval in place. Do you not see any complexity in the present. Please provide your comments.

  The van of provisioning core can be done using access policies.

  If you want to that role management application in pre OIM 11 g, you will need to do more custom ROs. There are two ways to do this.

  The best way to do is to combine the approaches in these two messages and create a custom RO that moves the user to a group of IOM which has an access policy attached which manipulates the child table on the base target RO system.

  http://iamreflections.blogspot.com/2010/09/OIM-HOWTO-one-resource-object-per.html
  http://iamreflections.blogspot.com/2010/09/OIM-HOWTO-target-system-group.html

  Please take a look and see if it's understandable. I should probably write another entry that deals with this specific use case.
  / Martin

• Approval of IOM - behavior

  Hi experts,
  
  IOM 9.1.0.2
  I have the following situation (development environment):
  
  I made the request to a resource for 3 users (they have different managers).
  I set the approval workflow for the resource, where the first step is attributed to the demand for the target user manager.
  I realized that generated a unique request ID and the approval request has been sent to only a user's Manager. After the approval of the Manager of all the users have been configured for the resource.
  
  Should not the IOM send approval for each manager request?
  
  Any help, it will be very appreciated.
  
  TiA,
  Carlos

  IOM sees a single application as a single unit to operate in the approval workflow.

  If you need transport to the User Manager, you cannot have multiple users in a single query.

  Best regards
  / Martin