Workflow › WorkPoint Method › Participant Resolvers: WorkPoint Method › Specify Participants for Certify User Tasks

Specify Participants for Certify User Tasks

Certify User tasks generate the event CertifyRoleEvent. This event can be subject to workflow approval through the predefined process CertifyRoleApproveProcess.

Identity Manager also includes the predefined participant resolver CertifyRoleParticipantResolver, which appears in your environment by default. Participants for activities in a CertifyRoleApprovalProcess are specified through CertifyRoleParticipantResolver.

To provide participant configuration information

1. Open the Identity Manager Management Console by entering the following URL in a browser:

   http://<domain_name>/idmmanage

   where <domain_name> is the fully qualified domain name of the server where Identity Manager is installed. For example, myserver.mycompany.com:port.

2. Click Environments, then select the name of the appropriate Identity Manager environment.
3. Click Advanced Settings and then click Miscellaneous.
4. Define name/value pairs that specify the approvers for each role to be certified:
   • In the Property field, use the format: role-type.role-name

     role-type must be one of these roles: admin, access, provisioning.

     role-name is the name of any existing role.

     The role-name and role-type must be separated by a period (.).

   • In the Value field, specify the IDs of the approvers, and separate the IDs with a semi-colon (;).

In the following example, user certification can be approved for the following roles and by the following participants:

• jsmith01 and ajones19 can approve certification for the User Manager role
• plewis12 is the only approver for the System Manager role
• rtrevor8 and pkitt3 can approve certification for My Access Role

  Property	Value
  admin.User Manager	jsmith01;ajones19
  admin.System Manager	plewis12
  access.My Access Role	rtrevor8;pkitt3

Note: Any unspecified roles will not have approvers for a CertifyRoleEvent.