Provisioning Portal roles through CUP

[Former Member]

Hello Experts,

I am configuring EP provisioning through CUP. GRC and EP systems are mapped to the same LDAP system as datasource. EP and GRC user Ids are the same and it corresponds to the Active Directory ID (LDAP).

I created the EP connector as per the instructions in the config guide. But I have added necessary parameter values and did the field mapping. I have imported necessary Portal roles/user groups.

My EP connector is tested successful. But when I try to provision a role through CUP for EP, I get this error:

Error provisioning your request. Request no: 9. Error occurred in the system(s) : n/a, error details :

XP1-P2PNEWHIRE-USER CREATE-malformedRequest

XP1-customError

XP1 is my EP connector.

P2PNEWHIRE is the test user for whom I am trying to assign a user group/role in Portal.

In our case, ECC Id and EP Id are not the same. In CUP, the user ID (request page) is mapped to the SAPuserID (ECC) . Since ECC Id is different from EP Id, I created a custom field "AD_ID". This custom field (AD_ID) reads the Active Directory ID (from LDAP) and this should be used for creating EP users/ provision roles.

In the EP connector config, we specify connector parameter such as CREATE_USER:OC with value sapuser. Should we be providing this value??? Since the sapuser points to ECC user which is different from the EP user ID.

I have the custom Id(AD_ID) created in CUP as a custom field which should be

mapped to the Portal Id.

CUP Connecting system

User ID <--> SAP ECC Id

Active Directory ID (custom field in CUP) <--> SAP EP Id

Are there any steps that I am missing for EP provisioning?

I am stuck with this issue.. Appreciate any suggestions...

Thanks in advance..

Kee

[Former Member]

Provisioning worked once the portal parameters were set correctly on EP connector.Thanks for all the suggestions.

[Former Member]

Hi MK

This problem is not completely resolved. SAP has identified this as a product bug and provided a fix in SP 8. I have opened a ticket with SAP and working with customer support to get this resolved as I am getting the error msg sometimes even with SP 8.

Did you have EP and ECC id to be different?

If yes, please let me know your parameters and field mapping attributes and values?

Thanks

Kee

[Former Member]

Hi Kee

Yed indeed we have differrent ID's in EP and ECC

1.Is you data source LDAP?( silly questions) I am sure your connector must be working ?

2. Did map the fields in Field mapping >Provisioing

3. in the EP connecotor there are fields where you must have done passed soem parameter values

what do you have for USER_DATA_SOURCE?

go to portal and look for Portal datasource configuration XML file and find what the datasource ID is ?

Let me know

Regards

MK

[Former Member]

Hi,

I got the same error in SP8.... got it resolved by checking the connector parameters....

Misc -> Change the log level to DEBUG and you can pin point the exact connector parameter which is causing the issue.. in my case i ignored the "." at the end of the USER_DATA_SOURCE.....which i kept as "USER.R3_DATASOURCE" instead of "USER.R3_DATASOURCE."

Little... "." made a lot of difference

Cheers !!

Zaheer

[Former Member]

Hi

I just tried provisioning my portal roles/user groups in my system.

I still get the same error - "noSuchIdentifier" and "XP1-customError".

The user Id exists in EP but it still shows the same error "noSuchIdentifier" ..

Autoprovisioning still does not work in EP with LDAP as datasource. I have tried with all field mapping and without field mapping too. But the error still remains the same

Michael, Any progress at your end??

I have sent a msg to SAP on this regard.. I will keep you posted.

Thanks

Kee

[Former Member]

Hi there

Did you get this resolved ?

My data source is LDAP , but I am able to provsion roles in EP

let me know

Regards

MK

[former_member247081]

I just upgraded to 5.3 and installed SP07 yesterday and received this error. I had not attempted to provision into EP prior to installing SP07 so I'm not sure if this worked previously.

I'm not sure what you mean by "So do you have EP, ECC with different Ids or you just have problems provisioning Portal roles?" I'm currently using the default values provided by SAP's documentation for the paramter values on the connector (sapuser, sapgroup, etc).

[Former Member]

We were on GRC AC 5.3 SP05 when I got this issue.

I opened a ticket with SAP and they told me to upgrade to the latest Support Pack.

So do you have EP, ECC with different Ids or you just have problems provisioning Portal roles?

Becos, Provisioning Portal roles through CUP is fixed in SP 6.1 (for AE)..

We just got the latest support pack (SP 7) in our system. I will be testing this shortly.

I will keep you posted with the results on portal provisioning.

However, autoprovisioning issue with differnt user IDs still exists.

Hope this info helps..

Thanks

Kee

[former_member247081]

Kee,

Have you been able to resolve this? I am faced with the same exact error message when attempting to provision into EP. I am attempting to provisoining users to the standard UME db. I'm almost certain that the issue is with the configuration in the Field Mapping -> Provisioning area. Do you have to maintain all attributes for CUP and EP or just the attributes you are using?

Any assitance is appreciated.

[Former Member]

Thanks for your response.

LDAP is the datasource for GRC. But we have 2 IDs in LDAP one for EP and one for ECC.

So I need the SAP_user_ID (CUP field) pointing to ECC user ID (LDAP) and another custom Id (CUP custom field) refering to EP Id (LDAP)

So when I try to auto-provision, SAP_user_ID from CUP should be used for ECC and the custom ID should be used for EP. This is what I am trying to achieve.

ECC provisioning works fine but when I try it for EP it is throwing errors..

I have the field mapping for the EP system for these fields ONLY: fname, lname, telephone, validfrom,validto,email, department. There is no explicit field to map the EP Id with the AC CUP id. I dont see the user Id field on the EP side in the drop down.

If I can do a field mapping for the EP user Id then the system should pick that custom ID rather than SAP_USER_ID... Can this mapping be achieved?

Since I do the mapping in the EP connector, CREATE_USER:OC = sapuser the system looks for the sapuser(ECC) which may not be found in EP. Instead it should look for SAP EP user which is mapped to the custom field (CUP)

Here is the exact error msg:

<errorMessage xmlns="">Exception when processing a single request, check log file</errorMessage>

<addResponse xmlns="" result="urn:oasis:names:tc:SPML:1:0#failure" error="urn:oasis:names:tc:SPML:1:0#malformedRequest">

<errorMessage>No user id defined in spml request</errorMessage>

</addResponse>

<modifyResponse xmlns="" result="urn:oasis:names:tc:SPML:1:0#failure" error="urn:oasis:names:tc:SPML:1:0#customError">

<errorMessage>Can not update group because: Can not update group as member USER.CORP_LDAP.P2PNEWHIRE doesn&apos;t exist</errorMessage>

</modifyResponse>

</batchResponse>

2009-03-10 11:50:12,320 [SAPEngine_Application_Thread[impl:3]_21] INFO SubmitRequest.java@1660:errorMessageForFailure() : Failure==============addResponse

2009-03-10 11:50:12,320 [SAPEngine_Application_Thread[impl:3]_21] INFO SubmitRequest.java@1670:errorMessageForFailure() : FAILURE ERROR MESSAGE Before ==============urn:oasis:names:tc:SPML:1:0#malformedRequest

2009-03-10 11:50:12,320 [SAPEngine_Application_Thread[impl:3]_21] INFO SubmitRequest.java@1561:readResponse() : Before building the ParamDTO reading from the response......

2009-03-10 11:50:12,320 [SAPEngine_Application_Thread[impl:3]_21] INFO SubmitRequest.java@1569:readResponse() : IDM Test: NODE NAME ===== ::modifyResponse

2009-03-10 11:50:12,320 [SAPEngine_Application_Thread[impl:3]_21] INFO SOAPSPMLUtil.java@350:getStatus() : Response element for the bacth Request in Async call in SOAPSPMLUtil.java ::<modifyResponse result="urn:oasis:names:tc:SPML:1:0#failure" error="urn:oasis:names:tc:SPML:1:0#noSuchIdentifier">

<errorMessage>No id to modify defined</errorMessage>

<errorMessage>Can not update group because: Can not update group as member USER.CORP_LDAP.P2PNEWHIRE doesn&apos;t exist</errorMessage>

</modifyResponse>

</modifyResponse>

The system is looking for the SAP user ID instead of the custom Id for provisioning LDAP. This is the error source.

SubmitRequest.java@1660:errorMessageForFailure() : Failure==============modifyResponse

SubmitRequest.java@1670:errorMessageForFailure() : FAILURE ERROR MESSAGE Before ==============urn:oasis:names:tc:SPML:1:0#customError

SystemDAOFactory.java@567:getRoleProfileDAO() : INTO the method : systemId :XP1AElocaleDTO :com.virsa.ae.commons.po.AELocalePO@2aa2aee3

AECacheUtil.java@882:getCacheObject() : INTO the method : pCacheNameSYSTEMS,pLocaleId1

WSViHelper.java@47:getUserRoleSearchForAEService53Vi() : userProvisioningWS : com.sap.grc.ae.service.wsclient.userrolesearch.UserRoleSearchForAEService53Impl@6b285358

WSViHelper.java@51:getUserRoleSearchForAEService53Vi() : strURI : http://stxepdb01.fmmi.local:50000/UserRoleSearchForAEService_5_3/Config1?wsdl&style=document

WSViHelper.java@58:getUserRoleSearchForAEService53Vi() : userId : AC_RTAUser

WSViHelper.java@71:getUserRoleSearchForAEService53Vi() : setting socketTimeout to 900000 milli seconds

RoleProfileWSDAO.java@69:findRoleProfByUser() : INTO the method : userName : P2PNEWHIRE

2009-03-10 09:45:39,180 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@251:getUserRoleSearchConnectorInput() : id (conn system) : XP1

2009-03-10 09:45:39,180 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@252:getUserRoleSearchConnectorInput() : type (conn type) : SAPEP

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@265:getUserRoleSearchConnectorInput() : key : ASSIGN_GROUPS:OC

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@267:getUserRoleSearchConnectorInput() : val : sapgroup

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@265:getUserRoleSearchConnectorInput() : key : ASSIGN_ROLES:OC

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@267:getUserRoleSearchConnectorInput() : val : saprole

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@265:getUserRoleSearchConnectorInput() : key : CHANGE_USER:OC

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@267:getUserRoleSearchConnectorInput() : val : sapuser

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@265:getUserRoleSearchConnectorInput() : key : CREATE_USER:OC

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@267:getUserRoleSearchConnectorInput() : val : sapuser

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@265:getUserRoleSearchConnectorInput() : key : CREATE_USER:password

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@267:getUserRoleSearchConnectorInput() : val : password

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@265:getUserRoleSearchConnectorInput() : key : DELETE_USER:OC

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@267:getUserRoleSearchConnectorInput() : val : sapuser

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@265:getUserRoleSearchConnectorInput() : key : GROUP_DATA_SOURCE

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@267:getUserRoleSearchConnectorInput() : val : GRUP.CORP_LDAP.

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@265:getUserRoleSearchConnectorInput() : key : LOCK_USER:OC

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@267:getUserRoleSearchConnectorInput() : val : sapuser

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@265:getUserRoleSearchConnectorInput() : key : LOCK_USER:islocked

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@267:getUserRoleSearchConnectorInput() : val : true

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@265:getUserRoleSearchConnectorInput() : key : ROLESEARCH_URI

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@267:getUserRoleSearchConnectorInput() : val : http://stxepdb01.fmmi.local:50000/UserRoleSearchForAEService_5_3/Config1?wsdl&style=document

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@265:getUserRoleSearchConnectorInput() : key : ROLESEARCH_URI_PASSWORD

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@267:getUserRoleSearchConnectorInput() : val : Welcome2

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@265:getUserRoleSearchConnectorInput() : key : ROLESEARCH_URI_USERNAME

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@267:getUserRoleSearchConnectorInput() : val : AC_RTAUser

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@265:getUserRoleSearchConnectorInput() : key : ROLE_DATA_SOURCE

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@267:getUserRoleSearchConnectorInput() : val : ROLE.PCD_ROLE_PERSISTENCE.

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@265:getUserRoleSearchConnectorInput() : key : SCHEMA_ID

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@267:getUserRoleSearchConnectorInput() : val : SAPprincipals

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@265:getUserRoleSearchConnectorInput() : key : UNLOCK_USER:OC

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@267:getUserRoleSearchConnectorInput() : val : sapuser

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@265:getUserRoleSearchConnectorInput() : key : UNLOCK_USER:islocked

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@267:getUserRoleSearchConnectorInput() : val : false

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@265:getUserRoleSearchConnectorInput() : key : USER_DATA_SOURCE

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG WSViHelper.java@267:getUserRoleSearchConnectorInput() : val : USER.CORP_LDAP.

2009-03-10 09:45:39,196 [SAPEngine_Application_Thread[impl:3]_14] DEBUG RoleProfileWSDAO.java@75:findRoleProfByUser() : inputDTO.setUserId(userName), username : P2PNEWHIRE

2009-03-10 09:45:39,399 [SAPEngine_Application_Thread[impl:3]_14] DEBUG RoleProfileWSDAO.java@85:findRoleProfByUser() : results fetched

2009-03-10 09:45:39,399 [SAPEngine_Application_Thread[impl:3]_14] INFO SubmitRequest.java@1782:printList() : ================================================

2009-03-10 09:45:39,399 [SAPEngine_Application_Thread[impl:3]_14] INFO SubmitRequest.java@1784:printList() : ALL User Name === P2PNEWHIRE

2009-03-10 09:45:39,399 [SAPEngine_Application_Thread[impl:3]_14] INFO SubmitRequest.java@1786:printList() : ALL Application Name === XP1

2009-03-10 09:45:39,399 [SAPEngine_Application_Thread[impl:3]_14] INFO SubmitRequest.java@1788:printList() : ALL ACTION Name === CREATE_USER

2009-03-10 09:45:39,399 [SAPEngine_Application_Thread[impl:3]_14] INFO SubmitRequest.java@1790:printList() : ALL Msg CODE === 101

2009-03-10 09:45:39,399 [SAPEngine_Application_Thread[impl:3]_14] INFO SubmitRequest.java@1792:printList() : ALL Message Description === malformedRequest

2009-03-10 09:45:39,399 [SAPEngine_Application_Thread[impl:3]_14] INFO SubmitRequest.java@1794:printList() : ALL Message Description === malformedRequest

2009-03-10 09:45:39,399 [SAPEngine_Application_Thread[impl:3]_14] INFO SubmitRequest.java@1796:printList() : ================================================

2009-03-10 09:45:39,399 [SAPEngine_Application_Thread[impl:3]_14] INFO SubmitRequest.java@1782:printList() : ================================================

2009-03-10 09:45:39,399 [SAPEngine_Application_Thread[impl:3]_14] INFO SubmitRequest.java@1784:printList() : ALL User Name === P2PNEWHIRE

2009-03-10 09:45:39,399 [SAPEngine_Application_Thread[impl:3]_14] INFO SubmitRequest.java@1786:printList() : ALL Application Name === XP1

2009-03-10 09:45:39,399 [SAPEngine_Application_Thread[impl:3]_14] INFO SubmitRequest.java@1788:printList() : ALL ACTION Name === ASSIGN_ROLES

2009-03-10 09:45:39,399 [SAPEngine_Application_Thread[impl:3]_14] INFO SubmitRequest.java@1790:printList() : ALL Msg CODE === 123

2009-03-10 09:45:39,399 [SAPEngine_Application_Thread[impl:3]_14] INFO SubmitRequest.java@1792:printList() : ALL Message Description === customError

2009-03-10 09:45:39,399 [SAPEngine_Application_Thread[impl:3]_14] INFO SubmitRequest.java@1794:printList() : ALL Message Description === customError

2009-03-10 09:45:39,399 [SAPEngine_Application_Thread[impl:3]_14] INFO SubmitRequest.java@1796:printList() : ================================================

1. deleted some lines ###

2009-03-10 09:45:39,524 [SAPEngine_Application_Thread[impl:3]_14] ERROR Exception occured during auto provisioning, see details in the error list

com.virsa.ae.configuration.AutoProvisionException: Exception occured during auto provisioning, see details in the error list

[Former Member]

Hi Harleen,

Thanks for your response.

LDAP is the datasource for GRC. But we have 2 IDs in LDAP one for EP and one for ECC.

So I need the SAP_user_ID (CUP field) pointing to ECC user ID (LDAP) and another custom Id (CUP custom field) refering to EP Id (LDAP)

So when I try to auto-provision, SAP_user_ID from CUP should be used for ECC and the custom ID should be used for EP. This is what I am trying to achieve.

ECC provisioning works fine but when I try it for EP it is throwing errors..

I have the field mapping for the EP system for these fields ONLY: fname, lname, telephone, validfrom,validto,email, department. There is no explicit field to map the EP Id with the AC CUP id. I dont see the user Id field on the EP side in the drop down.

If I can do a field mapping for the EP user Id then the system should pick that custom ID rather than SAP_USER_ID... Can this mapping be achieved?

Thanks

Kee

[hkaur]

Can you please paste the error log here?

In CUP (request page), the User Id will be fetched from the user data source of CUP which in your case seems LDAP. Is that what you want or do you want to fetch user details from ECC system?

In the EP connector config, we specify connector parameter such as CREATE_USER:OC with value sapuser. Should we be providing this value??? Since the sapuser points to ECC user which is different from the EP user ID.

Yes, you need to mention these parameters and need to do the field mapping too.You can directly map the CUP user id to portal user id. Refer the configuration guide for more information on this.

Regards

Harleen

[Former Member]

Hi Harleen,

Thanks for your response.

LDAP is the datasource for GRC. But we have 2 IDs in LDAP one for EP and one for ECC.

So I need the SAP_user_ID (CUP field) pointing to ECC user ID (LDAP) and another custom Id (CUP custom field) refering to EP Id (LDAP)

So when I try to auto-provision, SAP_user_ID from CUP should be used for ECC and the custom ID should be used for EP. This is what I am trying to achieve.

ECC provisioning works fine but when I try it for EP it is throwing errors..

I have the field mapping for the EP system for these fields ONLY: fname, lname, telephone, validfrom,validto,email, department. There is no explicit field to map the EP Id with the AC CUP id. I dont see the user Id field on the EP side in the drop down.

If I can do a field mapping for the EP user Id then the system should pick that custom ID rather than SAP_USER_ID... Can this mapping be achieved?

Error log:

2009-03-10 09:45:33,493 [SAPEngine_Application_Thread[impl:3]_25] DEBUG AuditTrailDAO.sqlj@777:findAuditTrail() : query : SELECT HIST.REQNO REQNO, HIST.HST_ACTION HST_ACTION, HIST.ACTIONDATE ACTIONDATE, HIST.USERID HST_USER, HIST.ACTION_VALUE ACTION_VALUE, HIST.DESCRIPTION DESCRIPTION, HIST.PATHNAME PATHNAME, HIST.STAGE_NAME STAGE_NAME, HIST.ID ID, HIST.DEPENDENT_ID DEPENDENT_ID FROM VIRSA_AE_RQ_HST HIST WHERE HIST.REQNO = ? ORDER BY ACTIONDATE ASC

2009-03-10 09:45:33,493 [SAPEngine_Application_Thread[impl:3]_25] DEBUG com.virsa.ae.accessrequests.bo.RequestBO : getRequestBaseDetails() : OCFO_SECURITY : OUT of the method with poRequestDetails : com.virsa.ae.accessrequests.po.RequestBasePO@261558cb[requestType=CHANGE,requestTypeShortDesc=Change Account,reqNo=17,priority=HIGH,workFlowType=AE,statusObj=OPEN,statusShortDesc=OPEN,activeRequestTab=groups_tab,workflowPO=com.virsa.ae.accessrequests.po.WorkFlowPO@43788af5[mapOfReqPathsIdsActiveToApprover={19=com.virsa.ae.dao.dto.RequestDataWFHistoryDTO@673d9897[reqNo=17,reqPathId=19,pathName=CHANGE_P1,isDetourFlag=0,updateDate=Mon Mar 09 22:42:34 EDT 2009,initialApprvrSeq=0,currentApprvrSeq=0,stageName=NEW_AS11,intCurrentFlag=1,status=OPEN,parentReqPathId=<null>]},apprvrDet=AGENCY_ADMIN,stageName=NEW_AS11,stageConfigurationDTO=com.virsa.ae.workflow.dto.StageConfigurationDTO@7ced1674[riskAnalysisMandatory=false,riskAnalysisMandatoryOnAccessChange=false,changeRequestContent=true,approveCommentsMandatory=false,rejectCommentsMandatory=false,approvalType=Any Approver,rejectRequest=false,canReRoute=false,forwardAllowed=true,forwardType=Any Approver,emailGroup=,additionalSecurityForApprove=false,additionalSecurityForReject=false,additionalSecurityForCreateUser=false,addRole=true,approveLevel=Request,confirmApproval=false,rejectLevel=Request,confirmRejection=false,considerSubStageForApprove=false,considerSubStageForReject=false,pathReEvaluationForNewRoles=0,canRejectRequest=false,canApproveRequest=false,reaffirmsRemoveItemsOnly=false,approveRequestWithConflicts=true,displayReviewScreen=false],isForwardedRequest=false,isGroupApproverRequest=false,isOpenTransaction=true,isDelegatedRequest=false,workflowType=AE,approversList=[OCFO_SECURITY],groupIdsList=[],subStageApproversDTOList=[],delegatorsList=[],usrForwardedByList=[]],priorityShortDesc=High,dueDate=12/31/9999,employeeType=,employeeTypeShortDesc=,functionalAreaShortDesc=,companyShortDesc=,bussProcShortDesc=,functionalArea=,location=,department=,requestorId=28200902100011101008660,requestorLastName=Ulaganathan,requestorFirstName=Kee,requestorName=Kee Ulaganathan,requestorEmail=dummy,requestorTelephone=,requestDate=03/09/2009,approverId=,approverLastName=,approverFirstName=,approverEmail=,approverName=<null>,approverTelephone=,requestCategory=,company=,requestJustification=,comments=,commentsAdded=false,bussProc=,bussProcOwner=,bussProcOwnerEmail=,position=,orgUnit=,job=,personnelNo=,personnelArea=,reqCategory=,reqReason=,costCenter=,bussArea=,userStrtValDt=03/09/2009,userEndValDt=12/31/9999,defaultStrtValDt=03/10/2009,defaultuserEndValDt=12/31/9999,isAdminRequest=false,isNewRequest=false,stageConfigurationPO=com.virsa.ae.accessrequests.po.StageConfigurationPO@1eeafd6e[riskAnalysisMandatory=false,riskAnalysisMandatoryOnAccessChange=false,changeRequestContent=true,approveCommentsMandatory=false,rejectCommentsMandatory=false,approvalType=Any Approver,rejectRequest=false,canReRoute=false,forwardAllowed=true,forwardType=Any Approver,emailGroup=,additionalSecurityForApprove=false,additionalSecurityForReject=false,additionalSecurityForCreateUser=false,addRole=true,approveLevel=Request,confirmApproval=false,rejectLevel=Request,confirmRejection=false,considerSubStageForApprove=false,considerSubStageForReject=false,pathReEvaluationForNewRoles=0,canRejectRequest=false,canApproveRequest=false,reaffirmsRemoveItemsOnly=false,approveRequestWithConflicts=true,displayReviewScreen=false],pathDetailsPOList=[com.virsa.ae.accessrequests.po.RequestPathDetailsPO@55a4509d[reqPathId=19,pathName=CHANGE_P1,pathNameShortDesc=CHANGE_P1,status=OPEN,statusShortDesc=OPEN,currentAprvrSeq=0,activeToRequest=true,stageStatusPOList=[com.virsa.ae.accessrequests.po.StageStatusPO@b610b5a[stageNameShortDesc=Security Admin,statusShortDesc=<null>,stageName=NEW_AS11,stageSeq=0,status=IN_PROGRESS,listApprovers=[Admin ocfo_security(OCFO_SECURITY)]]],listOfApproversYetToApprove=]],auditInfoList=[com.virsa.ae.search.po.AuditTrailPO@18755607[requestHdr=<null>,requestHst=[com.virsa.ae.search.po.RequestHistoryPO@3f62f21c[subActions=[com.virsa.ae.search.po.RequestHistoryPO@42beb93c[subActions=[],id=325,reqNo=17,actionDate=Mon Mar 09 22:42:34 EDT 2009,action=GROUP_ADDED,userId=ULAGANATHANK,path=,stage=,actionValue=ZG_POAPPROVER,description=XP1,dependentId=324,provisionUserId=]],id=324,reqNo=17,actionDate=Mon Mar 09 22:42:34 EDT 2009,action=OPEN,userId=ULAGANATHANK,path=,stage=,actionValue=,description=,dependentId=0,provisionUserId=], com.virsa.ae.search.po.RequestHistoryPO@79052cc6[subActions=[com.virsa.ae.search.po.RequestHistoryPO@7773345f[subActions=[],id=330,reqNo=17,actionDate=Mon Mar 09 22:43:06 EDT 2009,action=USER_PROVISIONING_FAILED,userId=OCFO_SECURITY,path=,stage=,actionValue=XP1,description=malformedRequest,dependentId=329,provisionUserId=], com.virsa.ae.search.po.RequestHistoryPO@2c73863d[subActions=[],id=331,reqNo=17,actionDate=Mon Mar 09 22:43:06 EDT 2009,action=ROLE_PROVISIONING_FAILED,userId=OCFO_SECURITY,path=,stage=,actionValue=XP1,description=customError,dependentId=329,provisionUserId=]],id=329,reqNo=17,actionDate=Mon Mar 09 22:43:03 EDT 2009,action=SUBMIT_FOR_AUTO_PROVISIONING,userId=OCFO_SECURITY,path=,stage=,actionValue=,description=,dependentId=0,provisionUserId=]],externalAuditTrial=<null>]],isEditable=true,userDomain=]