When a request gets created in IAM to create a user of some sort, workflows can be set up to ensure approval from various actors depending on the business needs. In this situation, sometimes there is a need to review the requests that have been created, outside of the IAM interface. For this purpose, IAM provides API’s that help in querying existing requests.

OIM workflow API does not function properly with the other provisioning API’s and thus it is important to ensure that request processing is done in a separate application. This situation creates challenges in design and forces decoupling of workflow operations from other system operations.

In the following sections, we will concentrate on connection, configuration and querying the OIM workflow engine to prod the existing requests.

Connecting to OIM Service

When writing a web application, specially using SSO infrastructure, it is important to connect as an admin to the web service, and then identify the user who will perform the operation.

First, remote client configuration is set up for workflow services.

Read more