How to expose 'Generate My Activation Code' task as a self-service task on Identity Manager

search cancel

How to expose 'Generate My Activation Code' task as a self-service task on Identity Manager

book

Article ID: 43188

calendar_today

Updated On:

Products

CA Identity Manager CA Identity Governance CA Identity Portal CA Risk Analytics CA Secure Cloud SaaS - Arcot A-OK (WebFort) CLOUDMINDER ADVANCED AUTHENTICATION CA Secure Cloud SaaS - Advanced Authentication CA Secure Cloud SaaS - Identity Management CA Secure Cloud SaaS - Single Sign On

Issue/Introduction

We have an Arcot Endpoint and we would like to know how to enable 'Generate My Activation Code' task as a self service task.

This will allow our users to generate Activation Code (as known as: One Time Password) during a step up authentication scenario.

Environment

Release: CAIDMB99000-12.6.7-Identity Manager-B to B
Component:

Resolution

Modify the Admin Role 'Self Manager', and assign the 'Generate My Activation Code' task to the role.
<Please see attached file for image>

<Please see attached file for image>
Modify 'Generate My Activation Code' Admin task with the following changes.
- On 'Profile' tab, uncheck 'Hide In Menus'.
  
  <Please see attached file for image>
- On 'Search' Tab, create a copy of the Search Screen - 'Implicit Arcot User Accounts Search', name it as 'Implicit Arcot User Accounts Search2' and add your Arcot Endpoint Name as a condition of the 'Default search filter'.
  <Please see attached file for image>
- Select the new search screen 'Implicit Arcot User Accounts Search2'.
  
  <Please see attached file for image>
  
  <Please see attached file for image>
- On 'Tabs' tab, change the task tab from 'Generate My OTP' to 'Generate Arcot User OTP'.
  
  Before the change:
  
  <Please see attached file for image>
  
  After the change:
  
  <Please see attached file for image>
  
  Please ensure the tab uses 'Generate Arcot User OTP' screen or a copy of it.
  If you use a copy of 'Generate Arcot User OTP' screen, you can remove or hide some screen fields to simplify the screen, but please don't remove 'User E-mail Address' and 'Qualified E-mail Address' fields as the field value is used by email template.
  
  <Please see attached file for image>
  
  Note: These changes allow the associated email Template to work properly.
- Submit all the changes
Enable Email notification for 'Generate My Activation Code' task.
- On IM Management Console, navigate to Home > Environments > {environment name} > Advanced Settings > E-mail
- Enable the setting - 'Tasks email Enabled'
  
  <Please see attached file for image>
- Under the 'Send e-mail when the following tasks are completed or during workflow' section, please search Admin Task Name - 'Generate My Activation Code', and then click on 'Add'.
  
  <Please see attached file for image>
- On 'Task' list confirm the email notification entry - 'Generate My Activation Code'.
  
  <Please see attached file for image>
- Click on 'Save'.
Restart the IM Server.
Verify the Generate My Activation Code task
- Create a test IM User with both of 'Self Manager' and 'Self Service for Arcot' Admin Roles.
- Associate the IM User with an Arcot account.
- Ensure the Arcot account gets a 'Qualified E-mail Address'.
- Logon the IM User Console as the test user.
- Click on 'Provisioning Endpoints' > 'Generate My Activation Code'.
  
  <Please see attached file for image>
- Ensure select 'Notify User By Email' is selected on 'Email Notification' section.
  
  <Please see attached file for image>
- Click on 'Submit'
  
  <Please see attached file for image>
- Check the Activation Code email
  
  <Please see attached file for image>