Approval Workflow

CA Identity Portal displays the details of the next approver in a request on its timeline. In CA Identity Manager this information is read from the Assignees tab of the approval task. So in order for the requester to be able to see the next approver in the timeline under "My Requests" the administrator must add the assignees tab to the approval task and make sure it's exposed to TEWS web services.
cis141
Viewing Approvers' Details
CA Identity Portal displays the details of the next approver in a request on its timeline. In CA Identity Manager this information is read from the Assignees tab of the approval task. So in order for the requester to be able to see the next approver in the timeline under "My Requests" the administrator must add the assignees tab to the approval task and make sure it's exposed to TEWS web services.
Note:
The Assignees tab exists by default on all approval tasks; this is relevant for custom approval tasks.
Implementation
CA Identity Portal can identify pending work items either as approvals (default) or implementations. In order for a work item to enter the implementations queue a hint needs to be configured on that node.
To configure the hint in CA Identity Manager:
  1. Open workpoint designer and edit the workflow process that will be used in the task.
  2. Add User Data element of type Text
    1. Name: IS_IMPLEMENTATION_NODE
    2. Value: true
  3. Save the changes.
Example:
worddav04a0d21909fd752ec8638a9ab90fc7d1.png
Parallel Approvers
There can be a scenario in which multiple approvers exist at the same time in one backend task. For example:
  1. The workflow was configured in CA Identity Manager on the event "Assign Provisioning Role" and in CA Identity Portal multiple permissions that are mapped to that same task were triggered in one request. Therefore multiple workflow jobs were triggered in parallel.
  2. The workflow that was configured in CA Identity Manager is custom and has parallel approvers.
In those examples by default CA Identity Portal would display in the request timeline all of the pending approval for each of the permissions since it does not know which approval belongs to which permission. In order for CA Identity Portal to match permission to approver hints need to be configured on those nodes.
To configure the hint in CA Identity Manager:
  1. Open workpoint designer and edit the workflow process that will be used in the task.
  2. On the approval node add User Data element of type Text
    1. Name: CA Identity Portal_TARGET_PERM_TYPE
    2. Value: depends on the type of permission, can be ROLE/ATTRIBUTE/GROUP
  3. Add another User Data element of type Text
    1. Name: CA Identity Portal_TARGET_PERM_NAME
    2. Value: the name of the target permission
  4. Save the changes.
Notes:
  • Usually this type of data is dynamic therefore it is required to fetch it from IM using an agent, then setting it dynamically as user data.
  • If one node should accommodate multiple permissions on the same activity then just add a counter suffix to the name of the user data.
Example for the agent code with a suffix:
ThisActivityInstData.setUserData("CA Identity Portal_TARGET_PERM_TYPE"+suffix,"ROLE"); ThisActivityInstData.setUserData("CA Identity Portal_TARGET_PERM_NAME"+suffix,provRole); //where provRole is a variable containing the provisioning role name