And that is a very good advice :-)
Do not create massive big operational workflows - create smaller and potentially reusable workflows.
There is although a catch here - the workflow model currently does not allow a call to a process to return properties - so the programming model is not fully complete - and for some historical reason I do not know we never implemented the subflow component in the operational workflow model.
You can of course create custom extensions that can close some of these gaps - or do like we did many years ago - create a generic extension for calling SDI that returns what ever you need :-)
You can find that here : https://community.ibm.com/community/user/blogs/konstantin-chistyakov1/2019/10/16/ibm-tivoli-directory-integrator-proxy-workflow-ext
------------------------------
Franz Wolfhagen
WW IAM Solution Architect - Certified Consulting IT Specialist
IBM Expert Labs
------------------------------
Original Message:
Sent: Tue June 17, 2025 02:12 AM
From: Mita Mitic
Subject: IVIG Roles
Hi group,
Just two cents from over here:
We (an business partner) do it a lot - putting workflow elements into role request processes, like approvals, notifications etc. Soon enough you will find your user modify operational workflow huge and complex, to the extent where workflow editor copes to open it or save it at all.
So we start creating separate workflow operations as global operations, and we put all workflow activities there, and call them from user modify operation where we only do branching and calling these operations. It makes request branching a little bit uglier in "View request" page, but it keeps user modify workflow manageable.
Hope this helps.
Mita
------------------------------
Mita Mitic
Original Message:
Sent: Tue June 17, 2025 01:42 AM
From: Franz Wolfhagen
Subject: IVIG Roles
There is no equivalent to Access Request and Account Request workflows for Roles. There is an IDEA (request for enhancement) for that that AFAIK is being considered - but I have no knowledge of when and what is planned - you will need to raise this with your IBM contact.
So for now you need to process role approvals in the Person Modify workflow. If you are using ISC shopping cart that means unpacking the request and splitting out the role requests into separate approval flows - this is no easy task - but I have done this for a customer as a PoC to close the gap until we get this resolved.The code is highly complex but it is available for any customers working with our Expert Labs teams - but releasing it here will not be a good idea due to the complexity.
------------------------------
Franz Wolfhagen
WW IAM Solution Architect - Certified Consulting IT Specialist
IBM Expert Labs
Original Message:
Sent: Mon June 16, 2025 01:02 PM
From: Rudy Santos
Subject: IVIG Roles
Hi,
Is there a way to include a workflow approval for Organizational Roles or Application Roles?
Tks.
------------------------------
Rudy Santos
------------------------------