19. Automated Authorization Workflow

This chapter describes how ID-Synch's automated workflow engine streamlines account management tasks:

Requests

End users, known as requesters, use the New account request module (nph-idr.exe) to request changes for themselves or other users. Changes can include:

• New accounts and inventory based on predefined templates and roles

• Changes to existing accounts, user information, and account group membership

• Changes to their own information

The request is sent by e-mail to the relevant authorizers.

Login ID creation

ID-Synch includes a default ID generator plug-in to generate Profile IDs based on enterprise rules. Alternatively, IDs can be entered by requesters, then automatically approved or assigned by authorizers using the ID approval module (nph-idi.exe).

Authorization

Authorizers use the Request approval module (nph-idp.exe) to review and authorize requests for change.

Request tracking

Requesters, and the recipients of changes, can use the Request tracking module (nph-ids.exe) to check the status of their requests.

The requester can also login to the Request tracking module (nph-ids.exe) and cancel the requests before they are authorized.

By allowing all ID-Synch users and authorizers to request changes, the change process becomes more timely and various phases of the automated workflow become obsolete.

For example, the account authorization phase becomes unnecessary if the requester is an account authorizer for the target or the selected templates or roles. It is assumed that the requester has authorized those templates and roles, allowing the accounts to be created immediately.