Problem Description
When we create any disconnected application instance with child form in OIM 11gR2 PS1, we add the multivalued attribute into child dataset. This multivalued attribute hold the role data of the application. This can be set in 2 ways,
Either as Entitlement, where the role data will be visible in catalog as entitlement and can be added to child form directly using Modify Account option.
Or Only as Application Role, where role data will not be exposed as entitlements in catalog, and only option to add is to modify account.
if you go with the first option where role data are exposed as entitlements, then you have to select the Entitlement check box in the attribute configuration.
once you do that, automatically in the corresponding process definition 2 tasks are added for child data grant and revoke.
But if you choose the option 2, where child data are not exposed as entitlements, then no extra process task gets created in process definition. Only the form update task will be responsible for adding and removing child data in application instance.
Using option 2, when any one add a role through "Modify Account" process, "UD_[APP_NAME] Updated" task gets triggered and assign task for fulfillment.
In OIM 11.1.2.3.0 if you create disconnected application instance with 2nd option, then it will not work properly. When you add any role data in child table through "Modify Account" process, no process task gets triggered. As a result records get added in OIM database (child table), but no fulfillment task assigned to implementers.
Resolution (as of now)
Create the process task for each operation manually (insert, update, delete in child table), and map the adpMANUALPROVISIONING adapter.
No comments:
Post a Comment