Modifying a Process Tasks General Information

Developing Provisioning Processes 12-19 operations, the Lookup.USR_PROCESS_TRIGGERS is not used. Therefore, when the status changes, perform the following to run the process task: For transition from Disabled to Enabled status: 1. In the Process Definition form, create a process task named Enable User.

2. Open the Editing Task window, and click the General tab.

3. From the Task Effect list, select Enables Process or Access to Application.

4. Select Conditional and specify the condition to be met for the task to be added to

the process. For trnsition from Enabled to Disabled status: 1. In the Process Definition form, create a process task named Disable User.

2. Open the Editing Task window, and click the General tab.

3. From the Task Effect list, select Enables Process or Access to Application.

4. Select Conditional and specify the condition to be met for the task to be added to

the process. For transition from EnabledDisabledProvisioned to Revoked status: 1. In the Process Definition form, create a process task named Delete User. 2. Then set this task as an Undo task for the Create User task, which is the task that creates the user and is typicaly unconditional.

3. Select Conditional and specify the condition to be met for the task to be added to

the process. For the USR_LOCKED, USR_LOCKED_ON, USR_MANUALLY_LOCKED Attributes The lock and unlock operations, are handled in Oracle Identity Manager as separate orchestrations. The orchestration is on: entity-type=User operation=LOCK Or: entity-type=User operation=UNLOCK The event handler that does the evaluation for Lookup.USR_PROCESS_TRIGGERS is: oracle.iam.transUI.impl.handlers.TriggerUserProcesses This is triggered only in the following user orchestrations: ■ MODIFY: For generic fields ■ CHANGE_PASSWORD , RESET_PASSWORD: For USR_PASSWORD propagation ■ ENABLE , DISABLE, DELETE: For handling the execution of process tasks For lockunlock operations, the TriggerUserProcesses event handler is not triggered. Therefore, for the attributes modified through lockunlock operations, the Lookup.USR_PROCESS_TRIGGERS is not checked. Note: when the OIM user is deleted, for each completed task in each resource, Oracle Identity Manager tries to run the Undo tasks.