OIG 11G R2 PS2 Field Enablement Training - Oracle · Complete Multi-Phase Certification Oracle Proprietary - Restricted to Personal Use in an Oracle partner training class 3 | P a

OIG 11G R2 PS2 Training

Complete Multi-Phase Certification Oracle Proprietary - Restricted to Personal Use in an Oracle partner training class

1 | P a g e

OIG 11G R2 PS2 Field Enablement Training

Lab 24a Overseer Certification and Custom Certification Workflow

Disclaimer: The Virtual Machine Image and other software are provided for use only

during the workshop. Please note that you are responsible for deleting them from your

computers before you leave. If you would like to try out any of the Oracle products, you

may download them from the Oracle Technology Network

(http://www.oracle.com/technology/index.html) or the Oracle E-Delivery WebSite

(http://edelivery.oracle.com)

http://www.oracle.com/technology/index.html

http://edelivery.oracle.com/



2 | P a g e

Table of Contents

1. Introduction .............................................................................................................................................. 3

2. Creating New Custom Certification Composite ........................................................................................ 3

3. Applying the Newly Created Custom Certification Composite ................................................................. 9



3 | P a g e

1. Introduction

Certification oversight is the activity of reviewing, and possibly overriding, the decisions of the primary

reviewer within the scope of a particular primary-review task.

A person who has the opportunity to override the certification decisions of a primary reviewer within

the scope of a particular primary-review task is called an overseer. The overseer has the following char-

acteristics:

An overseer must be an OIM user.

Only one overseer at a time can oversee a primary-review task.

An overseer has the right to view and override the decisions made by the primary reviewer or by

any previous overseer.

As a part of the certification configuration, you can select a certification composite that defines the certi-

fication oversight workflow. A certification composite is a SOA workflow that the certification server

launches for each primary reviewer, or delegated reviewer, during a phase of certification.



4 | P a g e

2. Modifying Certification Task Rule

In this tutorial, we will modify a custom certification composite.

We will customize the composite so that the certification goes through the management chain

during sign off.

We will configure the task to go through the management chain up to two levels in Phase I.

Note: Make sure OIM & SOA server are started and up and running.

1. Open the SOA Composer and login as WEBLOGIC/Oracle123

2. Click on Open and select Open Rules.



5 | P a g e

3. Select CertificationOverseerProcess_rev1.0 and click on Open.

4. Click on the RIGHT-arrow button to expand the rule.

5. Then click on Edit at the top left hand.



6 | P a g e

6. Modify the rule so it looks like the following:

7. Arguments for CreateManagementChainList:



7 | P a g e

8. Arguments for CreateResourceList:



8 | P a g e

9. Commit the changes



9 | P a g e

3. Applying the Modified Custom Certification Composite

1. Login as ADMIN to SYSADMIN console in a new browser window.

2. Click on Certification Definitions.

3. Click on Quarterly Cert for IS Org, and Edit to confirm edit.



10 | P a g e

4. Click on Configuration link at the top of the page.



11 | P a g e

5. Click on Workflow Settings’ search button.



12 | P a g e

6. Click on the right-arrow button to see what options we have.

Select the newly modified composite, CertificationOverseerProcess and click Add.



13 | P a g e

7. We will see that the Workflow Settings now is with the new composite name.

8. Click Save.

9. Click OK for the confirmation dialog box.



14 | P a g e

4. Testing the Custom Certification Composite

1. By default DCRANE’s manager is xelsysadm.

We need to change his manager to Alan E Cox so that DCRANE will have two levels of manager.

a. Login as ADMIN to the IDENTITY Console.

b. Search for user with user login DCRANE.

c. Click on Modify User.

d. Change the value of Manager to Alan E Cox (AC69663).



15 | P a g e

e. Click on Submit.

2. Now, we know that

a. DCRANE is the organization certifier for Information Systems.

b. Danny Crane’s manager is Alan E Cox (AC69663)

c. Alan E Cox’s manager is Robert Bahr (RB5068).

d. Robert Hanes (RHANES) is the second phase certifier.

3. Login as ADMIN to SYSADMIN console in a new browser window.

4. Click on Scheduler under System Management

5. Run the Scheduler Job of Cert_Quarterly Cert for IS Org.

6. Complete the newly generated certification task as what you have done in Lab 24 Complete Multi

Phase Certification.

a. Login as DCRANE to IDENTITY Console and complete the certification task.

b. Login as AC69663 to IDENTITY Console and complete the certification task.

c. Login as RB5068 to IDENTITY Console and complete the certification task.

d. Login as RHANES to IDENTITY Console and complete the certification task.

7. After completing the entire certification campaign, login as ADMIN to the IDENTITY Console.



16 | P a g e

8. Click on Dashboard and select Show Completed. Click on the certification task that you have com-

pleted.

9. Select one of the users and navigate to the Action History tab.



17 | P a g e

10. Select any entitlement of a user and navigate to the Action History tab.



18 | P a g e

Documents

OIG 11G R2 PS2 Field Enablement Training - Oracle · Complete Multi-Phase Certification Oracle Proprietary - Restricted to Personal Use in an Oracle partner training class 3 | P a