This article includes updates for Smart ID 23.10.5.
This article describes how to create or edit a simple process in Identity Manager Admin, with the Process Designer tool. To create more complex processes with the full set of tasks, the Activiti designer plugin can be used.
Prerequisites
Before setting up a process, make sure that the following things apply:
Log in to Identity Manager Admin as an
adminuser.
Add process
In Identity Manager Admin, go to Home > Process Designer.
To add a new process:
Click +New.
Enter a Name, for example
Create Employee, and a Description.Click Save+Edit.
The Process Design panel is shown.
To edit an existing process, double-click on its name.
Optionally, enter a Help text.
Add, remove, or edit process tasks
Add, remove, or edit process tasks as needed.
Go to the Task List tab.
There is always a startElement automatically generated. You can configure a form as attribute for it (not mandatory).
In the Task List tab, click + to add a task.
Select a task type. See the available task types and attributes in the table below.
To use standard service tasks, select Service task as type.Enter a Name, a Description, and the required attributes for the selected task type. For example, for a Save Data task, a data pool is needed to specify where to save the data.
If a service task is chosen, click the pen symbol to edit.
To use a standard service task:Select Delegate Expression.
Enter expression with the name of the standard service task in the text field, for example ${
createRelationJavaDelegate}.Enter values for the given parameters.
For information on the available standard service tasks and parameters, see Standard service tasks in Identity Manager.
To let a step be done in parallel to the previous step, check Branching.
Click Preview to see a graphic representation of the current process.
Click Save.
Set permissions
Add permissions for users and roles for all operation types:
Go to the Permissions tab.
For each operation type, Delete, Update, Start process, and so on, click the operation name. Repeat steps 3-4 to add permissions for users and roles.
To add permissions for a specific user, click Add user and select the user in the drop-down list.
To add permissions for a role, click Add role and select the role in the drop-down list.
Click Save.
Task types and attributes
Task name | Description | Attributes |
|---|---|---|
Assign New Number | A number from a number range is assigned to a data pool field. |
|
Card Operation | An action on a card (e.g. Set PIN/Change PIN) is executed. See also Structure of an encoding description in Identity Manager for more information. |
|
Change State | The state of an object is changed in the local Identity Manager database to a particular state, e.g. from "Active" to "Inactive". |
|
Change State in CA | The state of a certificate is changed in the CA to a particular state. The state is then also changed in the local database. |
|
Check Task | This task checks the relationship between a data pool object and a particular identity object. The relationship must be a "one-to-one" relationship. If this is not the case, an activity error occurs. |
|
Choose Mapping | Copy data from one data pool to another while applying a pre-configured mapping. See Set up mapping in Identity Manager for more information. |
|
Delete Data | This task deletes one core object from its data source. The core object is identified by the configured data pool and the variable <datapool>_Id within the process map. Restrictions: It is not possible to delete core objects that are based on an external data source, with the exception of SCIM based core objects which can be deleted. |
|
Export Task | Data is exported according to an export definition. |
|
HTTP Client | Send an HTTP request from a process and make the response available in the process map. |
|
Mail Task | An email is sent, for example, a confirmation of a receipt. |
You can also enter an Expression ${...} that gets resolved from the DataMap. |
Modify Roles Automatically | Roles are automatically assigned to or withdrawn from particular objects. |
|
Modify Roles Manually | The user can assign or withdraw roles to or from particular objects manually. |
|
Print Report | A document with the indicated template can be printed. |
|
Production | A card or token is produced. This task is for server side production only. If you configure multiple printers, see Set up printers in Identity Manager. The process variable processVarCardSdkPrinterUrl can be used to fill with the symbolic name of a printer to find the connection to the CardSDK. If the variable is not in the process, the defaultPrinter is used. |
|
Production with Preview | Before a card is produced a preview of the card is displayed on the user interface. There are two variations: one for client-side and one for server-side production. These differ by the following forms:
If you configure multiple printers, see Set up printers in Identity Manager. The process variable processVarCardSdkPrinterUrl can be used to fill with the symbolic name of a printer to find the connection to the CardSDK. If the variable is not in the process, the defaultPrinter is used. |
|
Request Softtoken | A softtoken is required by the CA and sent to the recipient by email. |
|
Return Number | A number from a number range is released again. |
|
Save Data | The process data are saved in the data pool indicated. If a suitable ID is found, an update is run, otherwise a new data record is created. Restrictions: It is not possible to update and create core objects that are based on an external data source. |
|
Script Task | This task contains a scripting engine for script languages such as JUEL, BeanShell, JavaScript and Groovy. |
|
Service Task | A JAVA class that is executed during the process runtime is added to the process. A set of standard service tasks is available. For more information, see Standard service tasks in Identity Manager. |
|
User Task | A user dialog (user task) is used in order to model the interaction of a user. It is a form in which entries have to be made. |
|