OIM - provision of account upon request
Is it possible to provide an account in an entitlement request, or does OIM expect the account to already exist prior to entitlement request?
I already have an instance of the application, it has 2-3 rights
when an OIM user asks for the right to a specific application instance, I assume that this OIM user should already have an account in the application instance
source to share
I believe that version 11.1.2.2 and later will automatically include an account with the request if it is not granted to the user when they request the right associated with it.
Otherwise, in previous versions, the account had to be granted first before rights could be requested for users.
source to share
In OIM R2, when you add an access right from the Directory, it automatically adds the corresponding App instance.
In the event that your application has received approval, the eligibility will not be granted and will be in the "In Progress" state. Once the request is approved, it will be submitted.
source to share
In 11gR2PS2 and PS3 (before that) it was possible to raise the request for entitlement even if the dependent account was not provided. If it tries to raise an entitlement request, the dependent account will be automatically added to the trash.
If there is an approved workflow for both the entitlement and the account and requesting entitlement to obtain approval first before the dependent account, the save entitlement Fulfills . After the request for approved accounts and completed rights will automatically move to Granted from In Progress
source to share