User can make request from CA Identity Portal, let said user select "VPN" access by click "+" icon,then required to fill up their mobile number(user have to keyin mobile no. manually) and check out (IM assign the VPN access & update the mobile number been used into target VPN system).
Let said now, user want to change the mobile number been used in VPN access, what should be the flow ?
a) Do I build custom form(in Portal) for user just to change their mobile number used in VPN access ?
b) Is there another way ?
Note: As I understand, in Access Request ->Users can only select "+" or "-" to add or remove access but there is no "Modify" access....
If the mobile number is part of the user's attributes, it may be best to add it into your modify user form to allow users to update it this way. Or, if the attribute is stored elsewhere you can create a new form for modifying. I think you're correct that it won't be possible to modify the number in the add/remove access page.
I aware that mobile number can be a user attribute. My concern is more on how to handle additional attribute(on target application) to be fill up during access request. This is very common in customer env. Anyway thanks for the clarification.
The form seen in the access request is the form defined in the execution plan.
Fined the permissions you need to change:
Find target permission element
When you edit the permission, you will see the execution plan
The execution plan is tied to a forms
In those forms you can define the attributes you want to fill. All attributes available in the userstore definitions, as well as LAH will be available.
Just to confirm, u are saying that i can enable the "Modify Form" point to a task. Then i can allow users to modify their mobile number. Meaning that beside "+" or "-' icon, i can allow user to make modification on their existing access ?
Yes. Every Portal form is linked to a task, which is an IM task.
Just to share, after I enable the Modify Form. I can see this(a "repair tool icon") in Portal.
Which mean I can modify my existing Role and change the attributes(Mobile Number) that link to it.