8.13 Entity Activity

The Entity activity updates an entity in the Identity Vault. You can use this activity to create, modify, or delete attributes on an entity. You can also use this activity to create or delete an entity (see Section 7.7, Working with Entity Activities).

A workflow must have at least one Entitlement or Entity activity.

8.13.1 Properties

The Entity activity has the following properties:

Table 8-21 Entity Activity Properties

Property Name

Description

Name

Provides a name for the activity.

Entity Type

Specifies the target entity type: User or Group.

Operation

Indicates what kind of operation will be performed on the target entity:

  • Create/Modify

  • Delete attributes/values

  • Delete entity

To create or modify attributes of an entity or to create a new entity, select create/modify. To delete attributes of an entity, select delete.

To delete an entity, select delete object.

Set Workflow Status

Specifies the approval status of the provisioning request. Set to True for approved; otherwise, set to False. This method of setting workflow status overrides other methods. For example, the Set Default Completion Status to Approved parameter (see Table 5-1, Overview Properties) or the Approval Status activity (see Section 8.8, Workflow Status).

8.13.2 Data Item Mapping

To bind the data items associated with the Entity activity, you define mappings for the attributes associated with the target entity type.

Table 8-22 Entity Activity Data Item Mappings

Setting

Description

Entity dn

Identifies the entity that is the target of the operation. The default value is recipient.

To create a new object, specify a distinguished name that does not yet exist.

HINT:The output of the DNMaker control can be used as input for the Entity dn value. The DNMaker control constructs the DN by allowing the user to enter the naming attribute in a text field and presenting an interface for picking a container. After this data has been captured in a request form, the output can be mapped to a variable in the flowdata object. In the definition for the Entity activity, this flowdata variable can be accessed in the Entity dn setting with an expression such as 

flowdata.get(’groupdn’);

For details on using the DNMaker control, see Section 6.5.9, DNMaker.

Modify Type

Indicates how the mapping should be performed for an attribute. The choices are

  • Append Value

  • Replace Value

  • Replace All Values

For many attributes, Replace Value is the only option that makes sense; therefore, this option is selected automatically and cannot be changed.

You must specify the Modify Type setting before specifying the Modify Value Expression setting.

Modify Value Expression

Specifies a source expression for an attribute. When you click a cell in the Modify Value Expression column, the ECMA expression builder displays to help you define your expression. The list of attributes available varies depending on which entity type was selected on the Properties tab.

Designer automatically inserts a sample ECMAScript expression into this field. The code provided varies depending on the Operation property specified in Properties and the Modify Type selected in Data Item Mapping. For example, if you have specified Create/Modify for Operation, and Replace All Values for Modify Type, Designer inserts an expression that helps you to create a vector: 

function list() { v=new java.util.Vector(); v.add('{Enter Item 1}'); v.add('{Enter Item 2}'); return v; };  list();

In some cases you might be able to create expressions that work as well or better than the sample expression. For example, instead of creating a vector for multiple attribute values, you can create a flowdata variable (see Section 4.3.3, Understanding Workflow Data) to store multiple attribute values, and use the getObject function to retrieve the values of the flowdata variable (see ECMAScript Variables).

NOTE:The cells in the Target Attribute column are not editable.

8.13.3 E-Mail Notification

Not supported with this activity.