How to expose 'Generate My Activation Code' task as a self-service task on Identity Manager

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Risk Analytics
• CA Secure Cloud SaaS - Arcot A-OK (WebFort)
• CLOUDMINDER ADVANCED AUTHENTICATION
• CA Secure Cloud SaaS - Advanced Authentication
• CA Secure Cloud SaaS - Identity Management
• CA Secure Cloud SaaS - Single Sign On

Issue/Introduction

Summary:

We have an Arcot Endpoint and we would like to know how to enable 'Generate My Activation Code' task as a self service task.

This will allow our users to generate Activation Code (as known as: One Time Password) during a step up authentication scenario.

Background:

N/A

Environment:

• IM r12.6 SPx

Instructions:

1. Modify the Admin Role 'Self Manager', and assign the 'Generate My Activation Code' task to the role.

   <Please see attached file for image>

    

    

   <Please see attached file for image>

   

    

2. Modify 'Generate My Activation Code' Admin task with the following changes.
   
   • On 'Profile' tab, uncheck 'Hide In Menus'.
     
     

     <Please see attached file for image>

     
   • On 'Search' Tab, create a copy of the Search Screen - 'Implicit Arcot User Accounts Search', name it as 'Implicit Arcot User Accounts Search2'  and add your Arcot Endpoint Name as a condition of the 'Default search filter'.

     <Please see attached file for image>

     
     
     

   • Select the new search screen 'Implicit Arcot User Accounts Search2'.
      

     <Please see attached file for image>

     
     
     

     <Please see attached file for image>

     

   • On 'Tabs' tab, change the task tab from 'Generate My OTP' to 'Generate Arcot User OTP'.
     
     Before the change:
     
     

     <Please see attached file for image>

     
     
     After the change:
     
     

     <Please see attached file for image>

     
     
     Please ensure the tab uses 'Generate Arcot User OTP' screen or a copy of it.
     If you use a copy of 'Generate Arcot User OTP' screen,  you can remove or hide some screen fields to simplify the screen, but please don't remove 'User E-mail Address' and 'Qualified E-mail Address' fields as the field value is used by email template.
     
     

     <Please see attached file for image>

     
     
     Note: These changes allow the associated email Template to work properly.

   • Submit all the changes

3. Enable Email notification for 'Generate My Activation Code' task.
   
   • On IM Management Console, navigate to Home > Environments > {environment name} > Advanced Settings > E-mail
   • Enable the setting - 'Tasks email Enabled'
     
     

     <Please see attached file for image>

     
   • Under the 'Send e-mail when the following tasks are completed or during workflow' section, please search Admin Task Name - 'Generate My Activation Code', and then click on 'Add'.
     
     

     <Please see attached file for image>

     
     
     
   • On 'Task' list confirm the email notification entry - 'Generate My Activation Code'.
     
     

     <Please see attached file for image>

     
     
     
   • Click on 'Save'.
4. Restart the IM Server.
5. Verify the  Generate My Activation Code task
   • Create a test IM User with both of 'Self Manager' and 'Self Service for Arcot' Admin Roles.
   • Associate the IM User with an Arcot account.
   • Ensure the Arcot account gets a 'Qualified E-mail Address'.
   • Logon the IM User Console as the test user.
   • Click on 'Provisioning Endpoints' > 'Generate My Activation Code'.
     
     

     <Please see attached file for image>

     
   • Ensure select 'Notify User By Email' is selected on 'Email Notification' section.
     
     

     <Please see attached file for image>

     
   • Click on 'Submit'
     
     

     <Please see attached file for image>

     
   • Check the Activation Code email
     
     

     <Please see attached file for image>

     

Now the Generate My Activation Code task is ready as a Self Service task.

Additional Information:

• Read more about:  How to expose 'Generate My Arcot QnA' task as a self-service task on Identity Manager
  http://www.ca.com/us/support/ca-support-online/product-content/knowledgebase-articles/tec2523948.aspx

Environment

Release: CAIDMB99000-12.6.7-Identity Manager-B to B
Component: