Identity Governance provides default request and approval forms for applications and permissions access. When more complex forms are required, authorized administrators, application owners, or their delegates can also customize the default forms or create customized forms for one or more applications and permissions using Forms Builder and Forms Renderer. Forms Builder enables you to design forms; add and validate data; edit JSON forms directly in the application; and seamlessly pass the user and approver submissions to Identity Governance request and fulfillment workflows. Forms Renderer uses the form JSON schema to render the forms and generate corresponding APIs.
For a detailed description of Forms Builder and its procedures, see Administrator’s Guide to Form Builder.
Identity Governance provides form sets (request and corresponding approval form) by default. On the Application Default Forms or Permission Default Forms tabs on the Access Request Policies page, you can choose a sample application or permission respectively, and simulate workflow to review default forms. If you want to customize the default forms, you can use Form Builder to customize them.
When you customize a default request form, you also need to add the corresponding controls to the default approval form to facilitate data flow. For example, if you want to add a Supervisor field to the request form, you must also add that field to the default approval form.
To customize default application or permission request and approval forms:
Log in to Identity Governance as a Customer, Global, or Request Administrator or an Application Owner.
Select Policy > Access Request Policies
Select Application Default Forms or Permission Default Forms.
Choose an application or permission that you can use to simulate a request and approval workflow.
Simulate a workflow and review the default fields.
Click the default request form to launch Form Builder in a new browser tab.
Drag and drop form components, configure related settings, and save the form. For Form Builder procedures, see Administrator’s Guide to Form Builder.
Select the Identity Governance browser tab to return to the policy page.
Click the approval form to launch Form Builder.
Duplicate the changes you made to the request form and save the form.
Select the Identity Governance browser tab to return to the policy page.
Publish forms individually or select Actions > Publish Forms to publish the request and approval form.
Compare the draft to published forms.
If needed, make additional changes or revert changes by selecting Actions > Revert form set to default.
(Conditional) If you had previously created custom forms for permissions or applications, you can select additional actions such as Change form set, Copy existing form set, or Assign form set. For information about creating form sets, see Section 21.3.2, Creating Custom Forms for One or More Permissions and Applications
(Optional) Select Actions and rename forms or the form set.
In addition to customizing the default forms, you can further customize forms for specific permissions or applications. As stated earlier, when you customize the request form, you also need to add the corresponding controls to the approval form to facilitate data flow. For example, when you add Select Box and Reason components to your Custom Request Form for laptop permission, you also need to add them to the Custom Approval Form so that the user selection and reason is passed to the approval form.
To create a custom request and approval form:
Log in to Identity Governance as a Customer, Global, or Request Administrator, or an Application Owner.
Select Catalog > Applications > Application Name or select Catalog > Permissions > Permission Name.
Create a new custom request and approval form:
Select Actions > Add form set.
Click Create Form Set.
Click the request form to launch Form Builder in a new browser tab.
Drag and drop form components, configure related settings, and save the form. For Form Builder procedures, see Administrator’s Guide to Form Builder.
Click the approval form to launch Form Builder.
Duplicate the changes you made to the request form and save the form.
(Conditional) If you had previously created a custom form set, assign or copy an existing custom form set to another permission or application:
Select Actions > Copy existing form set or Actions > Assign form set.
Select a form set from the list of custom form sets, rename the form set and forms’ names, and create the new forms.
Select the Identity Governance browser tab to return to the catalog page.
Select Actions > Publish Forms to publish the request and approval form.
Compare the draft to published forms.
Click Simulate Request Workflow to simulate the requester and approver experience.
(Optional) Rename a custom form or a custom form set by selecting Actions > Rename form or Actions > Rename Form Set respectively.
NOTE:If needed, you can always revert to the default forms or default form set by selecting Actions > Revert to default form or Actions > Revert form set to default respectively.
In addition to the ability to create custom forms using basic, advanced, and custom Form Builder components, you can also edit each form component and edit the form itself using JSON and JS (JavaScript) editors. For example, you can use the editors to construct instructions for fulfillment for laptop permission by adding JSON objects such as flowdata, which contains request data.
IMPORTANT:The JSON editor is meant for use by developers and advanced users to customize forms. Do not use it if you do not have JSON experience.
For more information about editing form components and using the editors, see Administrator’s Guide to Form Builder.