Identity Manager Workflow Participant Modification for Test Environments

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

When validating Identity Manager (IAM) workflows in a test or staging environment, workflow tasks may fail if the configured groups or users do not exist. This article outlines the procedure to modify workflow participant resolvers, allowing a single service account or test user to approve workflow stages and facilitate testing without requiring a production-like identity structure.

Environment

Identity Manager 14.x

Resolution

To enable workflow testing in an environment without complete user or group datasets, you can temporarily reconfigure participant resolvers to a static list.

1. Access the Task Configuration:
   • Log in to the Identity Manager Management Console.
   • Navigate to Roles and Tasks > Modify Task.
   • Select the relevant task and navigate to the Events tab.
2. Configure Participant Resolvers:
   • Open the workflow configuration for the desired event.
   • Locate the participant resolver drop-down menu for each approval stage.
   • Change the resolver type to List of Users.
   • In the provided field, specify a single valid test user (e.g., "idm" or your designated test administrator).
3. Submit Changes:
   • Save and submit the workflow policy update.
   • Once applied, the designated test user will be able to approve all workflow stages for the modified task, allowing testing to proceed despite missing group memberships.

Recommendation: Ensure these settings are reverted or adjusted before promoting the workflow policy to a production environment.