To Respond to An External Resource Provisioning Request

When a provisioning request is generated, the request suspends the provisioning process until one of the defined provisioners completes the manual provisioning or marks the request not complete, or the request times out. Identity Manager audits these provisioning responses.

As with any other work item, you can review all of your pending external resource provisioning requests from the Work Items -> Provisioning Requests tab.

You respond to provisioning requests as follows:

1. Click the Work Items > Provisioning Requests tabs to open the Awaiting Provisioning page.

   Figure 5–20 Awaiting Provisioning Page

   
   

2. Locate and select the pending provisioning request.

3. Optionally, you can open your provisioning request email, click a link that is defined in the Provisioning Request Template, and log in to view a page containing details about the provisioning request.

   From this page, you can update any of the requested attributes to accurately reflect what was provisioned for the user. For example, if the user requested a Sony laptop, but that model was not available, you could update the page with the model you actually provisioned.

   Figure 5–21 Provisioning Request for a New Laptop

   
   

4. Click one of the following buttons to process the request:

   • If you can provision the resource, click Completed.

     Identity Manager updates the user's external resource account attributes to show what was actually provisioned, removes the pending provisioning state flag, and completes the provisioning request work item being updated.

     If configured, Identity Manager also notifies the requester that the provisioning request is complete by using the email template configured for that purpose.

   • If you cannot provision the resource, specify a reason why, and click Not Completed.

     When you mark a request Not Completed,

     • The user is not provisioned to the external resource.

     • The external resource remains assigned to the user.

     • A yellow icon, indicating that an update is needed for the user, displays next to the user's name.

       If this user is edited, an error message displays, stating that the user cannot be found in the external resource.

     • If configured, Identity Manager also notifies the requester by using the email template configured for that purpose.

   • If you cannot provision the resource you can also click Forward to forward the request to someone else.

   When the provisioning request work item is completed or not completed, Identity Manager clears the user's assigned external resource pending state and no updates occur to the external resource data store.

   The resource displays in the user's list of assigned resources and in the list of current resource accounts, including the user's accountId on that resource.

   ---

   Note –

   If the assigned provisioner does not respond to a provisioning request before the specified timeout period, Identity Manager will cancel the associated provisioning request work item.

   ---

Escalating Provisioning Requests

• If you specified a timeout period when you configured the Provisioner Notification page, and a provisioning request exceeds the timeout period, Identity Manager performs one of the following actions:

  • If you specified a Provisioner Escalation Rule, Identity Manager uses that rule to determine the next provisioner, and then escalates the request to that provisioner.

  • If you did not select a Provisioner Escalation Rule, Identity Manager escalates the request to the Configurator. If a Configurator does not exist, the request is classified as ”not complete” once the timeout expires.

• If you left the Escalation timeout field blank, or entered a zero, Identity Manager never escalates the request.

Delegating Provisioning Requests

You can delegate external resource provisioning work items just like any other provisioning request. See Delegating Work Items for more information and instructions.