Creating a Three-Stage Approval Process - Identity Manager

Products

• CA Identity Suite
• CA Identity Manager

Issue/Introduction

This article describes the procedure to configure a custom three-stage approval workflow within Identity Manager.

This configuration extends the standard two-stage approval process to include an additional technical approval step.

Environment

Identity Manager 14.5 & 15

Cause

Identity Manager requires custom configuration within task nodes and property files to enable additional approval stages.

Resolution

 

Resolution

1. Configure the Approval Node

   1. Open the TwoStageApprovalProcess in the workflow editor.
      
      
      
   2. Add the new node required for the third stage.
   3. Select "Save As" to create the ThreeStageApprovalProcess.
   4. Edit the new node and navigate to the User Data tab.
   5. Select Type as TEXT (Note: The default is Bulk Text).
   6. Add the following lines, ensuring the values are updated to reference threestageapproval instead of twostageapproval:
      • ACTION_PERFORMED = none
      • ACTION_REQUIRED = NO
      • INITIAL_ASSIGNEE_COUNT = 0
      • PARTICIPANT_DESCRIPTION = imstask.label.threestageapproval.manager.description
      • PARTICIPANT_ID = managerapprover
      • PARTICIPANT_NAME = imstask.label.threestageapproval.manager.name


Note: Change the lines above to the other nodes, "User Data" to match the "threestageapproval" instead of "twostageapproval" 




2. Update the Resource Bundle

   1. Locate the IMSResources.properties file:
      • Virtual Appliance: /opt/CA/wildfly-idm/standalone/deployments/iam_im.ear/custom/resourceBundles
      • Windows: X:\wildfly\standalone\deployments\iam_im.ear\custom\resourceBundles\
   2. Back up the IMSResources.properties file.
   3. Append the following lines after the # TwoStateApprovalProcess section. If using a localized environment, ensure you add these lines to the appropriate language file (e.g., IMSResources_es.properties):
      

      ThreeStepsApprovalProcess
      
      imstask.label.threestageapproval.manager.name=Manager Approver
      imstask.label.threestageapproval.manager.description=IdentityMinder sends the first request to the manager approver. If found, the manager approver can approve or reject the task or event. If approved, the process proceeds to the business approver.
      imstask.label.threestageapproval.businessapprover.name=Business Approver
      imstask.label.threestageapproval.businessapprover.description=IdentityMinder sends the second request to the business approver. If found, the business approver can approve or reject the task or event. If approved, the process proceeds to the technical approver.
      imstask.label.threestageapproval.technicalapprover.name=Technical Approver
      imstask.label.threestageapproval.technicalapprover.description=IdentityMinder sends the third request to the technical approver. If found, the technical approver can approve or reject the task or event.
      imstask.label.threestageapproval.defaultapprover.name=Default Approver
      imstask.label.threestageapproval.defaultapprover.description=IdentityMinder sends a request to the default approver if the business approver or technical approver is not found. The default approver can approve or reject the task or event.
      
      

3. Finalize Configuration

   1. 1. Save the changes to the properties file.
      2. Restart the Identity Manager service to apply the configuration.

Additional Information

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.