6 Oracle Identity Analytics Workflows

This chapter contains the following sections:

6.1 Overview

A workflow is a specific sequence of actions or tasks that are related to a business process. In Oracle Identity Analytics, workflows enumerate each step involved in the various processes, such as role and policy creation, role and policy modification, and so on. It lists all the actors, who play a pivotal role in the management of roles and policies, and their function.

Oracle Identity Analytics has a robust and an easy-to-configure workflow engine. Workflows can be configured to any environment as they are based on the Open Source Open Symphony Workflow engine. Each workflow can be customized to support diverse requirements, such as role approval paths, policy approval paths, email integration, exposed web services to communicate with third-party applications, and so on.

6.2 Understanding Workflows

This section introduces workflows.

6.2.1 To View a Workflow

  1. Log in to Oracle Identity Analytics.

  2. Choose Administration > Configuration.

  3. Click Workflows.

    Eight workflows are listed.

  4. Click the desired workflow to view the steps that make up that workflow.

    To understand the Edit Workflow page, see Section 6.2.3, "Understanding the Edit Workflow Page."

6.2.2 Types of Workflows in Oracle Identity Analytics

The following table describes the eight workflows that are included with Oracle Identity Analytics.

Table 6-1 Types of Workflows in Oracle Identity Analytics

Workflow Description

Role Creation

Runs when a role is created.

Role Modification

Runs when a role is modified. For example, when a policy is added.

Role Membership

Runs when users are added or removed from the role.

Mass Modification

Runs when many roles are created or modified.

Policy Creation

Runs when a policy is created.

Policy Modification

Runs when a policy is modified.

Role Membership Rule Creation

Runs when role provisioning rule is created.

Role Membership Rule Modification

Runs when a role provisioning rule is modified.


6.2.3 Understanding the Edit Workflow Page

The Edit Workflow page displays the name, description, and various steps involved in the completion of the task in Oracle Identity Analytics. A diagrammatic representation of the workflow is displayed on the right side of the page.

  1. Name - Displays the name of the workflow.

  2. Description - Displays the workflow description.

  3. Steps - Displays a table explaining each step.

    See the following table for information.

Table 6-2 Understanding the Steps Table

Column Name Description

Step Name

Lists all the steps involved in the workflow.

Link Status

The status displayed to the user (in the UI).

Actions

Displays all the actions that can be taken in each step and the respective consequences.

Assignee Type

Displays the type of actor that is assigned to complete this step. The assignee types are usually one of the following:

  • Policy_owner - The designated policy owner.

  • Role_owner - The designated role owner.

  • Global_user - Any user who is assigned to complete the step.

  • Rule_owner - The designated rule owner.

  • Role - All users who are part of the selected role.

Assignee

Displays the employee ID of the actor assigned to complete this step.

Operation

Gives you the option of adding a step, deleting a step, or adding an action.


6.3 Designing Workflows

In Oracle Identity Analytics, each workflow has pre-configured default steps to complete the tasks listed in the table.

You can customize the workflows, however, based on the requirements of your organization.

You can make the following changes to a workflow:

  • Add a step.

  • Delete a step.

  • Edit Workflow Action Details.

6.3.1 To Add a Step in a Workflow

  1. Log in to Oracle Identity Analytics.

  2. Choose Administration > Configuration.

  3. Click Workflows.

  4. Select the desired workflow.

    The Edit Workflow page opens.

  5. Click Add Step in the Operations column.

  6. Select the desired template for the new step you want to add.

    • Approval Step - This is a template where you can choose the assignee for the step. Options available are policy owner, role owner, global user or role (any member of the role).

    • Policy Owner Approval - This is a pre-configured template where the policy owner is the assignee for the step.

  7. Complete the form.

    • Step Name - Enter the name of the step that you want to add.

    • Link Status - Select a link status.

      The user will see this status when the workflow begins.

    • Destination Step - Select the next step.

    • Assignee - Select the assignee, or the actor, who will take action.

    • Enable Due Date Options - Check the box if you want to enable due date options.

    • Stop Expires After - Enter the number of days after which the step can expire.

    • Enable Reminder Option - Check the box if you want to set reminder options.

    • Send First Reminder - Enter the number of days for the first reminder.

    • Reminder Frequency - Set the reminder frequency to once, daily, or weekly.

    • Choose Template - Click Choose Template and select the e-mail template to use for reminders.

    • Enable Escalation Option - Select to enable escalation options. This will send an escalation trigger to the assignee's manager if the step has not been completed within the deadline.

    • Escalation Trigger After - Enter the number of reminders after which the escalation trigger will be sent.

    • Choose Template - Click Choose Template to select the e-mail template to use for escalation triggers.

  8. Click Save.

6.3.2 To Delete a Step

  1. Log in to Oracle Identity Analytics.

  2. Choose Administration > Configuration.

  3. Click Workflows.

  4. Choose the desired workflow.

    The Edit Workflow page opens.

  5. Select the step that you want to delete by clicking Delete Step in the Operations column.

    A window opens confirming the action.

  6. Click Yes.

    The step is deleted.

6.3.3 To Edit Workflow Action Details

You can edit the hyperlinked steps in the Actions column.

  1. Log in to Oracle Identity Analytics.

  2. Choose Administration > Configuration.

  3. Click Workflows.

  4. Select the desired workflow.

    The Edit Workflow page opens.

  5. In the Actions column, click the hyperlinked step that you want to edit.

  6. Complete the form.

General Tab

  • Name - Type the name of the action involved in the workflow. For example, Approve Role, Reject Role, and so on.

  • Destination Step - Select the next step.

Assignee Tab

  • Assignee - Select the actor involved from the drop-down menu.

  • Selected Assignee - If the Assignee is global_user, use the search feature to select the global user that you want to assign.

Pre-Functions Tab

  • Add Pre-functions - Pre-function is an action that will be triggered when the workflow reaches this step.

    To add a pre-function, do the following:

    1. Click the Add Pre-Functions button.

    2. Select a pre-function from the list.

    3. Complete the form as needed.

    4. Click Save.

  • Delete Pre-functions - Deletes the selected pre-functions.

    To delete a pre-function, do the following:

    1. Select the pre-function by selecting the check box.

    2. Click Delete Pre-functions.

Post-Functions Tab

  • Add Post-functions - A post-function is an action that will be triggered when the workflow completes.

    1. Click the Add Post-functions button.

    2. Select a post-function from the list.

    3. Complete the form as needed.

    4. Click Save.

  • Delete Post-function - Deletes the selected post-functions.

    To delete a post-function, do the following:

    1. Select the post-function by selecting the check box.

    2. Click Delete Post-functions.