Identity Governance provides default request and approval forms for applications and permissions access. When more complex forms are required, authorized administrators, application owners, or their delegates can also customize the default forms or create customized forms for one or more applications and permissions using Forms Builder and Forms Renderer. Forms Builder enables you to design forms; add and validate data; edit JSON forms directly in the application; and seamlessly pass the user and approver submissions to Identity Governance request and fulfillment workflows. Forms Renderer uses the form JSON schema to render the forms and generate corresponding APIs.
For a detailed description of Forms Builder and its procedures, see the Form Builder Guide.
Identity Governance provides form sets (request and corresponding approval form) by default. On the Application Default Forms or Permission Default Forms tabs on the Access Request Policies page, you can choose a sample application or permission respectively, and preview forms to review default forms. If you want to customize the default forms, you can use Form Builder to customize them.
IMPORTANT:When you customize a default request form, you also need to add the corresponding controls to the default approval form to facilitate data flow. For example, if you want to add a Supervisor field to the request form, you must also add that field to the default approval form.
To customize default application or permission request and approval forms:
Log in to Identity Governance as a Customer, Global, or Request Administrator or an Application Owner.
Select Policy > Access Request Policies
Select Application Default Forms or Permission Default Forms.
Click the default request form to launch Form Builder in a new browser tab.
Drag and drop form components, configure related settings, and save the form. For Form Builder procedures, see the Form Builder Guide.
Select the Identity Governance browser tab to return to the policy page.
Click the approval form to launch Form Builder.
Duplicate the changes you made to the request form and save the form.
Select the Identity Governance browser tab to return to the policy page.
Publish forms individually or select Actions > Publish Forms to publish the request and approval form.
Compare the draft to published forms.
NOTE:Inline scripts in forms are published to the global javascript context. When inline scripts are used as helper functions in the Form Builder, comparisons might be displayed incorrectly. This occurs because two forms are sharing the same inline function.
If needed, make additional changes or revert changes.
(Conditional) If you had previously created custom forms for permissions or applications, you can select additional actions such as Change form set, Copy existing form set, or Assign form set. For information about creating form sets, see Section 21.6.2, Creating Custom Forms for One or More Permissions and Applications
(Optional) Select Actions and rename forms.
In addition to customizing the default forms, you can further customize forms for specific permissions or applications. As stated earlier, when you customize the request form, you also need to add the corresponding controls to the approval form to facilitate data flow. For example, when you add Select Box and Reason components to your Custom Request Form for laptop permission, you also need to add them to the Custom Approval Form so that the user selection and reason is passed to the approval form.
To create a custom request and approval form:
Log in to Identity Governance as a Customer, Global, or Request Administrator, or an Application Owner.
Select Catalog > Applications > Application Name or select Catalog > Permissions > Permission Name.
Create a new custom request and approval form:
Select Actions > Add form set.
Click Create Form Set.
Click the request form to launch Form Builder in a new browser tab.
Drag and drop form components, configure related settings, and save the form. For Form Builder procedures, see the Form Builder Guide.
Click the approval form to launch Form Builder.
Duplicate the changes you made to the request form and save the form.
Select the Identity Governance browser tab to return to the catalog page.
(Conditional) If you had previously created a custom form set, change, assign, or copy an existing custom form to another permission or application:
In an application’s Custom Forms tab, select Actions > Copy existing form set or Actions > Assign form set.
In a permission’s Custom Forms tab, select Actions > Change form set.
Select a form set from the list of custom form sets, rename the form set and forms’ names, and create the new forms.
Select Actions > Publish Forms to publish the request and approval form.
Compare the draft to published forms.
(Optional) Rename a custom form or a custom form set by selecting Actions > Rename form or Actions > Rename Form Set respectively.
NOTE:If needed, you can always revert to the default forms or default form set by selecting Actions > Revert to default form or Actions > Revert form set to default respectively.
In addition to the ability to create custom forms using basic, advanced, and custom Form Builder components, you can also edit each form component and edit the form itself using JSON and JS (JavaScript) editors. For example, you can use the editors to construct instructions for fulfillment for laptop permission by adding JSON objects such as flowdata, which contains request data.
IMPORTANT:The JSON editor is meant for use by developers and advanced users to customize forms. Do not use it if you do not have JSON experience.
For more information about editing form components and using the editors, see the Form Builder Guide.
Identity Governance enables you to download and import the request and approval forms for use in other environments. You can download and import:
Default forms for all applications
Default forms for all permissions
Custom forms for a specific application
Custom forms for a specific permission
The downloaded JSON file contains both request and approval form data because the request and approval forms need corresponding controls to facilitate data flow. When importing forms, you can preview the forms and compare the previous form with the imported form.
To download and import forms:
Log in to Identity Governance as a Customer, Global, or Request Administrator, or an Application Owner.
To download forms:
Select and download a form.
|
To download |
Do this |
|---|---|
|
Default Forms |
|
|
Custom Forms |
|
Type a meaningful description.
Select Download.
Select the download icon on the top title bar to select and download the file.
(Optional) Delete the downloaded files from the download area in Identity Governance.
If you do not manually delete files, Identity Governance will automatically delete files based on your default download retention day settings. For information about customizing download settings, see Section 3.9, Customizing Download Settings.
To import forms:
Click Import Custom Forms on the respective tab.
Navigate to the folder containing the JSON files.
Select the JSON file you want to import.
Preview forms.
NOTE:When downloading default forms, select an application or permission to preview forms.
Click Import.
Click Publish Form to use the imported form.
(Optional) Compare the draft form with the published form and revert form if needed.