test

Oracle Waveset 8.1.1 Business Administrator's Guide

Chapter 9 Task Templates

Waveset’s task templates enable you to use the Administrator interface to configure certain workflow behaviors as an alternative to writing customized workflows.

This chapter is organized into the following sections:

Enabling the Task Templates

Waveset provides these task templates that you can configure:

Before using the task templates, you must map the task template’s processes.

ProcedureTo Map Process Types

  1. In the Administrator interface, select Server Tasks from the menu, and then select Configure Tasks.

    Figure 9–1 illustrates the Configure Tasks page.

    Figure 9–1 Initial Configure Tasks Page

    Figure illustrating the initial Configure Tasks page.

    The Configure Tasks page contains a table with the following columns:

    • Name. Provides links to the Create User, Delete User, and Update User Templates.

    • Action. Contains one of the following buttons:

      • Enable. Displays if you have not enabled a template yet.

      • Edit Mapping. Displays after you enable a template.

        The procedure for enabling and editing process mappings is the same.

    • Process Mapping. Lists the process type mapped for each template.

    • Description. Provides a short description of each template.

  2. Click Enable to open the Edit Process Mappings page for a template.

    For example, the following page (Figure 9–2) displays for the Create User Template.

    Figure 9–2 Edit Process Mappings Page

    Figure showing the page that displays for the Create User Template.

    Note –

    The default process type (in this case, createUser) automatically displays in the Selected Process Types list. If necessary, you can select a different process type from the menu.

    • Generally, you do not map more than one process type for each template.

    • If you remove the process type from the Selected Process Types list and do not select a replacement, a Required Process Mappings section displays instructing you to select a new task mapping.

      Figure showing the Required Process Mappings section.

  3. Click Save to map the selected process type and return to the Configure Tasks page.

    Note –

    When the Configure Tasks page re-displays, an Edit Mapping button replaces the Enable button and the process name is listed in the Process Mapping column.

    Figure 9–3 Updated Configure Tasks Table

    Figure showing an updated Configure Tasks table with the process name listed in the Process Mapping column.

  4. Repeat the mapping process for each of the remaining templates.

Verifying Your Mappings

ProcedureTo Configure a Task Template

After mapping the template process types (Enabling the Task Templates), you can configure the task templates.

  1. In the Administrator interface, click Server Tasks in the main menu, then click Configure Tasks.

    The Configure Tasks page opens.

  2. Select a link in the Name column.

    One of the following pages displays:

    • Edit Task Template 'Create User Template’. Open to edit the template used to create a new user account.

    • Edit Task Template ’Delete User Template’. Open to edit the template used to delete or deprovision a user’s account.

    • Edit Task Template 'Update User Template'. Open to edit the template used to update an existing user’s information.

      Each Edit Task Template page contains a set of tabs that represent a major configuration area for the user workflow.

      The following table describes each tab, its purpose, and which templates use that tab.

    Tab Name 

    Purpose  

    Template 

    General (default tab)

    Allows you to define how a task name displays in the task bar located on the Home and Account pages, and in the task instance table on the Tasks page. 

    Create User and Update User Task Templates only 
     

    Allows you to specify how user accounts are deleted or deprovisioned 

    Delete User Template only 

    Notification 

    Allows you to configure email notifications sent to administrators and users when Waveset invokes a process. 

    All Templates 

    Approvals 

    Allows you to enable or disable approvals by type, designate additional approvers, and specify attributes from account data before Waveset executes certain tasks. 

    All Templates 

    Audit 

    Allows you to enable and configure auditing for the workflow. Use this tab to configure a workflow to capture information for Workflow Reports. 

    All Templates 

    Provisioning 

    Allows you to run a task in the background and to allow Waveset to retry a task if the task fails. 

    Create User Task Template and Update User Task Templates only 

    Sunrise and Sunset 

    Allows you to suspend a creation task until a specified date/time (sunrise) or to suspend a deletion task until a specified date/time (sunset). 

    Create User Task Template 

    Data Transformations 

    Allows you to configure how user data is transformed during provisioning. 

    Create User and Update User Task Templates only 

  3. Select one of the tabs to configure workflow features for the template.

    Instructions for configuring these tabs are provided in the following sections:

  4. When you are finished configuring the templates, click the Save button to save your changes.

Configuring the Task Templates

This section contains information and instructions for configuring task templates. The topics include:

Configuring the General Tab

This section provides instructions for configuring the General tab, which is available as part of the task template configuration process. For instructions on how to start the configuration process see Configuring the Task Templates.

Note –

In the Administrator interface, the pages for editing the Create User Template and Update User Template are identical, so configuration instructions are provided in one section.

For the Create User or Update User Templates

When you open either the Edit Task Template Create User Template form or the Edit Task Template Update User Template form, the General tab page displays by default. This page consists of a Task Name text field and a Insert an attribute menu, as shown in Figure 9–4. For instructions on how to start the configuration process see the Configuring the Task Templates section.

Figure 9–4 General Tab: Create User Template

Figure illustrating the Task Name field and Insert Attribute menu on the General tab

Task names can contain literal text and/or attribute references that are resolved during task execution.

ProcedureTo Change the Default Task Name

  1. Type a name into the Task Name field.

    You can edit or completely replace the default task name.

  2. The Task Name menu provides a list of attributes that are currently defined for the view associated with the task configured by this template. Select an attribute from the menu (optional).

    Waveset appends the attribute name to the entry in the Task Name field. For example:

    Create user $(accountId) $(user.global.email)

  3. When you are finished, you can

    • Select a different tab to continue editing the templates.

    • Click Save to save your changes and return to the Configure Tasks page.

      The new task name will display in the Waveset task bar, located at the bottom of the Home and Accounts tabs.

    • Click Cancel to discard your changes and return to the Configure Tasks page.

For the Delete User Template

When you open the Edit Task Template ’Delete User Template' page the General tab page displays by default. (For instructions on how to start the configuration process see Configuring the Task Templates.)

ProcedureTo Specify How User Accounts Are Deleted/Deprovisioned

  1. Use the Delete Waveset Account buttons to specify whether an Waveset account can be deleted during a delete operation.

    These buttons include:

    • Never. Select to prevent accounts from being deleted.

    • Only if user has no linked accounts after deprovisioning. Select to allow user account deletions only if there are no linked resource accounts after deprovisioning.

    • Always. Select to always allow user account deletions, even if there are still resource accounts assigned.

  2. Use the Resource Accounts Deprovisioning boxes to control resource account deprovisioning for all resource accounts.

    Note –

    • Unassigning or unlinking an external resource from a user does not create a provisioning request or a work item. When you unassign or unlink an external resource, Oracle Waveset does not deprovision or delete the resource account, so there is nothing for you to do.

    • You can use the Delete Resource Accounts page to unassign or unlink resource accounts when the Delete operation has been disabled.

    These boxes include:

    • Delete All. Enable this box to delete all accounts representing the user on all assigned resources.

    • Unassign All. Enable this box to unassign all resource accounts from the user. The resource accounts will not be deleted.

    • Unlink All. Enable this box to break all links from the Waveset system to the resource accounts. Users with accounts that are assigned but not linked will display with a badge to indicate that an update is required.

    These controls override the behaviors in the Individual Resource Accounts Deprovisioning table.

  3. Use the Individual Resource Accounts Deprovisioning boxes to allow a more fine-grained approach to user deprovisioning (compared to Resource Accounts Deprovisioning).

    These boxes include:

    • Delete. Enable this box to delete the account that represents the user on the resource.

    • Unassign. Enable this box and the user will no longer be assigned directly to the resource. The resource account will not be deleted.

    • Unlink. Enable this box to break the link from the Waveset system to the resource accounts. Users with accounts that are assigned but not linked will display with a badge to indicate that an update is required.

    The Individual Resource Accounts Deprovisioning options are useful if you want to specify a separate deprovisioning policy for different resources. For example, most customers do not want to delete Active Directory users because each user has a global identifier that can never be re-created following deletion. However, in environments where new resources are added, you might not want to use this option because the deprovisioning configuration would have to be updated every time you add a new resource.

Configuring the Notification Tab

This section provides instructions for configuring the Notification tab, which is available as part of the task template configuration process. For instructions on how to start the configuration process see Configuring the Task Templates.

All of the Task Templates support sending email notifications to administrators and users when Waveset invokes a process (usually after the process has completed). You can use the Notification tab to configure these notifications.

Note –

Waveset uses email templates to deliver information and requests for action to administrators, approvers, and users. For more information about Waveset email templates, see the section titled Customizing Email Templates in this guide.

Figure 9–5 shows the Notification page for the Create User Template.

Figure 9–5 Notification Tab: Create User Template

Figure showing the Notification tab for the Create User Template.

Configuring User Notifications

When specifying users to be notified, you must also specify the name of an email template to be used to generate the email used for notification.

To notify the user being created, updated, or deleted enable the Notify user checkbox, as shown in Figure 9–6, and then select an email template from the list.

Figure 9–6 Specifying an Email Template

Figure showing the Notify user checkbox

Configuring Administrator Notifications

To specify how Waveset determines administrator notification recipients, select an option from the Determine Notification Recipients from menu.

The available options are:

Specifying Administrator Notification Recipients by Attribute

Note –

The attribute must resolve to a string that represents a single account ID or to a list in which the elements are account IDs.

ProcedureTo Derive Notification Recipients’ Account IDs From a Specified Attribute

  1. Select Attribute from the Determine Notification Recipients from menu and new options display, as shown in the following figure.

    Figure 9–7 Administrator Notifications: Attribute

    Figure showing the new options in the Administrator Notifications section

    These options include:

    • Notification Recipient Attribute. Provides a list of attributes (currently defined for the view associated with the task configured by this template) used to determine recipient account IDs.

    • Email Template. Provides a list of email templates.

  2. Select an attribute from the Notification Recipient Attribute menu.

    The attribute name displays in the text field adjacent to the menu.

  3. Select a template from the Email Template menu to specify a format for the administrators’ notification email.

Specifying Administrator Notification Recipients by Rule

Note –

When evaluated, the rule must return a string that represents a single account ID or to a list in which the elements are account IDs.

ProcedureTo Derive Notification Recipients’ Account IDs From a Specified Rule

  1. Select Rule from the Determine Notification Recipients from menu and the following new options display in the Notification form.

    Figure 9–8 Administrator Notifications: Rule

    Figure showing the new options in the Administrator Notifications section

    • Notification Recipient Rule. Provides a list of rules (currently defined for your system) that, when evaluated, returns the recipients’ account IDs.

    • Email Template. Provides a list of email templates.

  2. Select a rule from the Notification Recipient Rule menu.

  3. Select a template from the Email Template menu to specify a format for the administrators’ notification email.

Specifying Administrator Notification Recipients by Query

Note –

Only LDAP and Active Directory resource queries are supported at this time.

ProcedureTo Derive Notification Recipients’ Account IDs by Querying a Specified Resource

  1. Select Query from the Determine Notification Recipients from menu and new options display in the Notification form, as shown in Figure 9–9.

    Figure 9–9 Administrator Notifications: Query

    Figure illustrating the new options that appear when you select a query from the Determine Notification Recipients from menu

    The Notification Recipient Administrator Query table consists of the following menus, which you can use to construct a query:

    • Resource to Query. Provides a list of resources currently defined for your system.

    • Resource Attribute to Query. Provides a list of resource attributes currently defined for your system.

    • Attribute to Compare. Provides a list of attributes currently defined for your system.

    • Email Template. Provides a list of email templates.

  2. Select a resource, a resource attribute, and an attribute to compare from these menus to construct the query.

  3. Select a template from the Email Template menu to specify a format for the administrators’ notification email.

ProcedureTo Specify Administrator Notification Recipients From the Administrator List

  1. Select Administrator List from the Determine Notification Recipients from menu and new options display in the Notification form, as shown in the following figure.

    Figure 9–10 Administrator Notifications: Administrators List

    Figure showing the new Administrator List options

    These options include:

    • Administrators to Notify. Provides a selection tool with a list of available administrators.

    • Email Template. Provides a list of email templates.

  2. Select one or more administrators in the Available Administrators list and move them to the Selected Administrators list.

  3. Select a template from the Email Template menu to specify a format for the administrators’ notification email.

Configuring the Approvals Tab

This section provides instructions for configuring the Approvals tab, which is available as part of the task template configuration process. For instructions on how to start the configuration process see the Configuring the Task Templates section.

You can use the Approvals tab to designate additional approvers and to specify attributes for the task approval form before Waveset executes the create, delete, or update user tasks.

Traditionally, administrators who are associated with a particular organization, resource, or role are required to approve certain tasks before execution. Waveset also allows you to designate additional approvers. additional administrators who will be required to approve the task.

Note –

If you configure Additional Approvers for a workflow, you are requiring approval from the traditional approvers and from any additional approvers specified in the template.

Figure 9–11 illustrates the initial Approvals page Administrator user interface.

Figure 9–11 Approvals Tab: Create User Template

Figure illustrating the initial Approvals page

ProcedureTo Configure Approvals

  1. Complete the Approvals Enablement section (see Enabling Approvals (Approvals Tab, Approvals Enablement Section)).

  2. Complete the Additional Approvers section (see Specifying Additional Approvers (Approvals Tab, Additional Approvers Section)).

  3. Complete the Approval Form Configuration section for the Create User and Update User Templates only (see Configuring the Approval Form (Approvals Tab, Approval Form Configuration Section)).

  4. When you are finished configuring the Approvals tab, you can

    • Select a different tab to continue editing the templates.

    • Click Save to save your changes and return to the Configure Tasks page.

    • Click Cancel to discard your changes and return to the Configure Tasks page.

Enabling Approvals (Approvals Tab, Approvals Enablement Section)

Use the following Approvals Enablement checkboxes to require approvals before the create user, delete user, or update user tasks can proceed.

Note –

By default, these checkboxes are enabled for the Create User and Update User Templates, but they are disabled for the Delete User Template.

Specifying Additional Approvers (Approvals Tab, Additional Approvers Section)

Use the Determine additional approvers from menu to specify how Waveset will determine additional approvers for the create user, delete user, or update user tasks.

The options on this menu are listed in Table 9–1.

Table 9–1 Determine Additional Approvers From Menu Options

Option 

Description 

None (default)

No additional approvers are required for task execution. 

Attribute 

Approvers’ account IDs are derived from within an attribute specified in the user’s view. 

Rule 

Approvers’ account IDs are derived by evaluating a specified rule. 

Query 

Approvers’ account IDs are derived by querying a particular resource. 

Administrator List 

Approvers are chosen explicitly from a list. 

When you select any of these options (except None), additional options display in the Administrator user interface.

Use the instructions provided in the following sections to specify a method for determining additional approvers.

ProcedureTo Determine Additional Approvers From an Attribute

Use the following steps to determine additional approvers from an attribute.

  1. Select Attribute from the Determine Additional Approvers from menu.

    Note –

    The attribute must resolve to a string that represents a single account ID or to a list in which the elements are account IDs.

    New options display, as shown in the following figure.

    Figure 9–12 Additional Approvers: Attribute

    Figure showing the new options on the Additional Approvers section.

    • Approver Attribute. Provides a list of attributes (currently defined for the view associated with the task configured by this template) used to determine approvers’ account IDs.

    • Approval times out after. Provides a method for specifying when the approval will time out.

      The Approval times out after setting affects both initial approvals and escalated approvals.

  2. Use the Approver Attribute menu to select an attribute.

    The selected attribute displays in the adjacent text field.

  3. Decide whether you want the approval request to timeout after a specified period of time.

ProcedureTo Determine Additional Approvers from a Rule

Use the following steps to derive the approver's accountIDs from a specified rule.

  1. Select Rule from the Determine additional approvers from menu.

    Note –

    When evaluated, the rule must return a string that represents a single account ID or to a list in which the elements are account IDs.

    New options display, as shown in the following figure.

    Figure 9–13 Additional Approvers: Rule

    Figure showing the new Additional Approvers options

    • Approver Rule. Provides a list of rules (currently defined for your system) that, when evaluated, returns the recipients’ account IDs.

    • Approval times out after. Provides a method for specifying when the approval will time out.

      The Approval times out after setting affects both initial approvals and escalated approvals.

  2. Select a rule from the Approver Rule menu.

  3. Decide whether you want the approval request to timeout after a specified period of time.

ProcedureTo Determine Additional Approvers From a Query

Use the following steps to derive approvers accountIDs by querying a specified resource.

Note –

Only LDAP and Active Directory resource queries are supported at this time.

  1. Select Query from the Determine Additional Approvers from menu and new options display, as shown in the following figure.

    Figure 9–14 Additional Approvers: Query

    Figure illustrating new options that appear in the Additional Approvers section

    • Approval Administrator Query. Provides a table consisting of the following menus, which you can use to construct a query:

      • Resource to Query. Provides a list of resources currently defined for your system.

      • Resource Attribute to Query. Provides a list of resource attributes currently defined for your system.

      • Attribute to Compare. Provides a list of attributes currently defined for your system.

    • Approval times out after. Provides a method for specifying when the approval will time out.

      Note –

      The Approval times out after setting affects both initial approvals and escalated approvals.

  2. Construct a query as follows:

    1. Select a resource from the Resource to Query menu.

    2. Select attributes from the Resource Attribute to Query and Attribute to Compare menus.

  3. Decide whether you want the approval request to timeout after a specified period of time.

ProcedureTo Determine Additional Approvers From the Administrator List

Use the following steps to explicitly choose additional approvers from the administrators list.

  1. Select Administrator List from the Determine Additional Approvers from menu and new options display, as shown in the following figure.

    Figure 9–15 Additional Approvers: Administrators List

    Figure illustrating the new options that appear in the Additional Approvers section

    • Administrators to Notify. Provides a selection tool with a list of available administrators.

    • Approval Form. Provides a list of user forms additional approvers can use to approve or reject an approval request.

    • Approval times out after. Provides a method for specifying when the approval will time out.

    The Approval times out after. Affects both initial approvals and escalated approvals.

  2. Select one or more administrators in the Available Administrators list and move the selected names to the Selected Administrators list.

  3. Decide whether you want the approval request to timeout after a specified period of time.

ProcedureTo Configure Approval Timeouts

Use the following steps to configure approval timeouts in the Approval times out after section.

  1. Select the Approval times out after checkbox.

    The adjacent text field and menu become active, and the Timeout Action options display, as shown in the following figure.

    Figure 9–16 Approval Timeout Options

    Figure showing the Timeout Action options

  2. Use the Approval times out after text field and menu to specify a timeout period as follows:

    1. Select seconds, minutes, hours, or days from the menu.

    2. Enter a number in the text field to indicate how many seconds, minutes, hours, or days you want to specify for the timeout.

      Note –

      The Approval times out after setting affects both initial approvals and escalated approvals.

  3. Use the Timeout Action buttons to specify what happens when the approval request times out.

    Click one of the following:

    • Reject Request. Waveset automatically rejects the request if it is not approved before the specified timeout period.

    • Escalate the approval. Waveset automatically escalates the request to another approver if the request is not approved before the specified timeout period.

      When you enable this button, new options display because you must specify how Waveset will determine approvers for an escalated approval. Continue to To Configure the Determine Escalation Approvers From Section for instructions.

    • Execute a task. Waveset automatically executes an alternate task if the approval request is not approved before the specified timeout period.

      Enable this button and the Approval Timeout Task menu displays so you can specify a task to execute if the approval request times out. Continue to To Configure the Approval Timeout Task Section for instructions.

ProcedureTo Configure the Determine Escalation Approvers From Section

When you select Escalate the approval in the Timeout Action section (To Configure Approval Timeouts), the Determine escalation approvers from menu displays, as shown in the following figure.

Figure showing the Determine escalation approvers from menu

  1. Choose an option from this menu to specify how approvers are determined for an escalated approval.

    The options include:

    • Attribute. Determine approver account IDs from within an attribute specified in the new user’s view.

      Note –

      The attribute must resolve to a string that represents a single account ID or to a list in which the elements are account IDs.

      When you select this option, the Escalation Administrator Attribute menu displays. Select an attribute from the list and the selected attribute displays in the adjacent text field, as shown in the following figure.

      Figure showing the Escalation Administrator Attribute menu and text field

    • Rule. Determine approver account IDs by evaluating a specified rule.

      Note –

      When evaluated, the rule must return a string that represents a single account ID or to a list in which the elements are account IDs.

      When you select this option, the Escalation Administrator Rule menu displays, as shown. Select a rule from the list.

      Figure showing the Escalation Administrator Rule menu

    • Query. Determine approvers account IDs by querying a particular resource.

      The Escalation Administrator Query menus display as shown in the following figure.

        Build your query as follows:

      1. Select a resource from the Resource to Query menu.

      2. Select an attribute from the Resource Attribute to Query menu.

      3. Select an attribute from the Attribute to Compare menu.

        Figure illustrating a query

    • Administrator List (default). Choose approvers explicitly from a list.

      The Escalation Administrator selection tool displays as shown in the following figure.

      Figure showing the Escalation Administrator selection tool

        Select approvers as follows:

      1. Select one or more administrator names from the Available Administrators list.

      2. Move the selected names to the Selected Administrators list.

ProcedureTo Configure the Approval Timeout Task Section

When you select the Execute a task option in the Timeout Action section (To Configure Approval Timeouts), the Approval Timeout Task menu displays as shown in the following figure.

Figure showing the Approval Timeout Task menu in the Timeout Action section

  1. Choose a task definition to execute if the approval request times out.

    For example, you might allow the requester to submit a help desk request or send a report to the Administrator.

Configuring the Approval Form (Approvals Tab, Approval Form Configuration Section)

Note –

The Delete User Template does not contain an Approval Form Configuration section. You can configure this section for Create User and Update User Templates only.

You can use features in the Approval Form Configuration section to select an approval form, and add attributes to (or remove attributes from) the approval form.

Figure 9–17 Approval Form Configuration

Figure showing the Approval Form Configuration section

By default, the Approval Attributes table contains the following standard attributes:

Note –

The default approval form was instrumented to allow approval attributes to display. If you are using an approval form other than the default form, you must instrument your form to display the approval attributes specified in the Approval Attributes table.

ProcedureTo Configure an Approval Form for Additional Approvers

  1. Select a form from the Approval Form menu.

    Approvers will use this form to approve or reject an approval request.

  2. Enable checkboxes in the Editable column of the Approval Attributes table to allow approvers to edit the attribute value.

    For example, if you enable the user.waveset.accountId checkbox the approver can change the user’s account ID.

    Note –

    If you modify any account-specific attribute values in the approval form, you will also override any global attribute values with the same name when the user is actually provisioned. For example, if resource R1 exists in your system with a description schema attribute, and you add user.accounts[R1].description attribute to the approval form as an editable attribute, any changes to the description attribute value in the approval form will override the value propagated from global.description for resource R1 only.

  3. Click the Add Attribute orRemove Selected Attributes buttons to specify attributes from the new user’s account data to display in the approval form.

    You cannot remove the default attributes from an approval form unless you modify the XML file.

ProcedureTo Add Attributes to the Approval Form

  1. Click the Add Attribute button located under the Approval Attributes table.

    The Attribute name menu becomes active in the Approval Attributes table, as shown in the following figure.

    Figure 9–18 Adding Approval Attributes

    Figure illustrating the Attribute name menu in the Approval Attributes table

  2. Select an attribute from the menu.

    The selected attribute name displays in the adjacent text field and the attribute’s default display name displays in the Form Display Name column.

    For example, if you select the user.waveset.organization attribute, you can:

    • Change the default attribute name or the default Form Display Name if necessary by typing a new name into the appropriate text field.

    • Enable the Editable checkbox to allow the approver to change the attribute’s value.

      For example, the approver might want to override information such as the user’s email address.

  3. Repeat these steps to specify additional attributes.

ProcedureTo Remove Attributes From the Approval Form

  1. Enable one or more checkboxes in the leftmost column of the Approval Attributes table.

  2. Click the Remove Selected Attributes button to immediately remove the selected attributes from the Approval Attributes table.

    For example, user.global.firstname and user.waveset.organization would be removed from the following table when you clicked the Remove Selected Attributes button.

    Note –

    You cannot remove the default attributes from an approval form unless you modify the XML file.

    Figure 9–19 Removing Approval Attributes

    Figure illustrating how to remove attributes

Configuring the Audit Tab

This section provides instructions for configuring the Audit tab, which is available as part of the task template configuration process. For instructions on how to start the configuration process see Configuring the Task Templates.

All of the configurable Task Templates support configuring workflows to audit certain tasks. Specifically, you can configure the Audit tab to control whether workflow events will be audited and specify which attributes will be stored for reporting purposes.

Figure 9–20 Audit Create User Template

Figure illustrating the Audit Create User Template

ProcedureTo Configure Auditing

  1. Select the Audit entire workflow checkbox to activate the workflow auditing feature.

    For information about workflow auditing, see Creating Audit Events From Workflows. Note that auditing workflows degrades performance.

  2. Click the Add Attribute button located in the Audit Attributes section to select the attributes you want to audit for reporting purposes.

  3. When the Select an attribute menu displays in the Audit Attributes table, select an attribute from the list.

    The selected attribute name displays in the adjacent text field.

    Figure 9–21 Adding an Attribute

    Figure showing the Audit Attributes section

ProcedureTo Remove Attributes

  1. Enable the checkbox adjacent to the attribute you want to remove.

    Figure 9–22 Removing the user.global.email Attribute

    Figure illustrating how to remove attributes from the Audit Attributes table

  2. Click the Remove Selected Attributes button.

Configuring the Provisioning Tab

This section provides instructions for configuring the Provisioning tab, which is available as part of the task template configuration process. For instructions on how to start the configuration process see Configuring the Task Templates.

Note –

This tab is available for the Create and Update User Templates only.

Figure 9–23 Provisioning Tab: Create User Template

Figure showing the Provisioning tab

You can use the Provisioning tab to configure the following options, which are related to provisioning:

Configuring the Sunrise and Sunset Tab

This section provides instructions for configuring the Sunrise and Sunset tab, which is available as part of the task template configuration process. For instructions on how to start the configuration process see Configuring the Task Templates.

Note –

This tab is available for the Create User task template only.

You use the Sunrise and Sunset tab to select a method for determining the time and date when the following actions will occur.

For example, you can specify a sunset date for a temporary worker whose contract expires after six months.

Figure 9–24 illustrates the settings on the Sunrise and Sunset tab.

Figure 9–24 Sunrise and Sunset Tab: Create User Template

Figure illustrating the settings on the Sunrise and Sunset tab

The topics that follow provide instructions for configuring the Sunrise and Sunset tab.

Configuring Sunrises

Configure the sunrise settings to specify the time and date when provisioning will take place for a new user, and to specify the user who will own the work item for sunrise.

  1. Select one of the following options from the Determine sunrise from menu to specify how Waveset determines a time and date for provisioning.

    The Determine sunrise from menu defaults to the None option, which allows provisioning to take place immediately.

  2. Select a user from the Work Item Owner menu to specify who will own the work item for sunrise.

    Note –

    Sunrise work items are available from the Approvals tab.

ProcedureTo Delay Provisioning Until a Specified Time

This section provides instructions to help you delay provisioning until a specific time.

  1. Select Specified time from the Determine sunrise from menu.

  2. When a new text field and menu display to the right of the Determine sunrise from menu, type a number into the blank text field and select a unit of time from the menu.

    For example, to provision a new user in two hours, specify information shown in the following figure.

    Figure 9–25 Provisioning a New User in Two Hours

    Figure illustrating how to configure a new user in two hours using the Determine sunrise from menu

ProcedureTo Delay Provisioning Until a Specified Calendar Date

This section provides instructions to help you delay provisioning until a specific date.

  1. Select Specified day from the Determine sunrise from menu.

  2. Use the menu options that appear to specify which week in the month, which day of the week, and which month the provisioning should occur.

    For example, to provision a new user on the second Monday in September, specify the following information.

    Figure 9–26 Provisioning a New User by Date

    Figure illustrating how to configure a new user by date

ProcedureTo Determine Provisioning Date and Time by Specifying an Attribute

This section provides instructions to help you determine a provisioning date and time based on attribute values in the users account data.

  1. Select Attribute from the Determine sunrise from menu.

    The following options become active:

    • Sunrise Attribute menu. Provides a list of attributes currently defined for the view associated with the task configured by this template.

    • Specific Date Format checkbox and menu. Enables you to specify a date format string for the attribute value (if necessary).

    If you do not enable the Specific Date Format checkbox, date strings must conform to a format that is acceptable to the FormUtil method’s convertDateToString. Consult the product documentation for a complete list of supported date formats.

  2. Select an attribute from the Sunrise Attribute menu.

  3. If necessary, enable the Specific Date Format checkbox and when the Specific Date Format field becomes active, enter a date format string.

    For example, to provision a new user based on their waveset.accountId attribute value using a day, month, and year format specify the information shown in the following figure.

    Figure 9–27 Provisioning a New User by Attribute

    Figure illustrating how to provision a new user by attribute

ProcedureTo Determine Provisioning Date and Time by Evaluating a Rule

This section provides instructions to help you determine the provisioning date and time by evaluating a specific rule.

  1. Select Rule from the Determine sunrise from menu.

    The following options become active:

    • Sunrise Rule menu. Provides a list of rules currently defined for your system.

    • Specific Date Format checkbox and menu. Enables you to specify a date format string for the rule’s returned value (if necessary).

    If you do not enable the Specific Date Format checkbox, date strings must conform to a format that is acceptable to the FormUtil method’s convertDateToString. Consult the product documentation for a complete list of supported date formats.

  2. Select a rule from the Sunrise Rule menu.

  3. If necessary, enable the Specific Date Format checkbox and when the Specific Date Format field becomes active, enter a date format string.

    For example, to provision a new user based on the Email rule using a year, month, day, hours, minutes, and seconds format specify the information shown in the following figure.

    Figure 9–28 Provisioning a New User by Using a Rule

    Figure illustrating how to provision a new user by using a rule

Configuring Sunsets

The options and procedures for configuring sunsets (deprovisioning) are essentially the same as those provided for sunrises (provisioning) in the Configuring Sunrises section.

The only difference is that the Sunset section also provides a Sunset Task menu because you must specify a task to deprovision the user on the specified date and time.

    To configure a sunset, perform the following steps.

  1. Use the Determine sunset from menu to specify the method for determining when deprovisioning will take place:

    Note –

    The Determine sunset from menu defaults to the None option, which allows deprovisioning to take place immediately.

  2. Use the Sunset Task menu to specify a task to deprovision the user on the specified date and time.

Configuring the Data Transformations Tab

This section provides instructions for configuring the Data Transformations tab, which is available as part of the task template configuration process. For instructions on how to start the configuration process see Configuring the Task Templates.

Note –

This tab is available for the Create and Update User Templates only.

If you want to alter user account data as the workflow executes, you can use the Data Transformations tab to specify how Waveset will transform the data during provisioning.

For example, if you want forms or rules to generate email addresses that conform to company policy, or if you want to generate sunrise or sunset dates.

When you select the Data Transformations tab, the following page displays.

Figure 9–29 Data Transformations Tab: Create User Template

Figure showing the Data Transformations tab

This page consists of the following sections:

You can configure the following options in each section: