Dataphin integrates with internal enterprise systems and DingTalk OA to manage approval flows, providing a unified IT management solution and an enterprise-level internal process system. This integration ensures that users have an approval experience consistent with their original system. Dataphin also supports custom approval rules, allowing you to configure different approval rules for asset permission requests based on their sensitivity level. For example, you can configure requests for low-sensitivity assets to be automatically approved and requests for high-sensitivity assets to require specific approvers. This topic describes how to connect to an external approval system.
References
You can use third-party approval flows by setting Select Approval System to Third-party Approval. For more information, see Custom approval system integration interface.
Background information
When you connect Dataphin to an external approval system, you often need to develop a proxy application. This is necessary because of differences in user matching and mapping, varying approval system interfaces, and the need for data interface conversion. The proxy application connects the Dataphin interface with the external approval system's interface. The approval system SDK is used to develop the proxy application, which helps you quickly establish basic workflows.
Limits
Only accounts with the super administrator or system administrator role can configure approval settings.
Precautions
Note the following when you change approval flow settings for requests that are in progress:
If you switch from Dataphin's internal approval flow to an external one, in-progress requests can still be processed in Dataphin.
If you switch from one external approval flow to another, or change the approval flow parameters, in-progress requests are processed according to the new flow. If the callback URL or its authentication information changes, callbacks might fail. This prevents the approval status from being synced to Dataphin. In this case, you must submit a new approval request. You can close the original request by revoking it or forcing a revocation.
If you switch from an external approval flow to the internal one, the results of external approvals for in-progress requests cannot be synced to Dataphin. You can close the original request by revoking it or forcing a revocation.
Go to the Approval Settings page
Log on to the metadata warehouse tenant with a super administrator or system administrator account.
On the Dataphin home page, click Management Center in the top menu bar.
In the navigation pane on the left, choose System Settings > Approval Settings to go to the Approval Settings page.
Go to System Settings > Approval Settings.
Configure approval settings
The approval system supports both built-in and external approval systems. You can enable or disable the external approval system. After you configure the approval settings, you can select the desired configuration from Approval Template > Approval System.
If the external approval system is enabled, you can select the built-in approval system or the external approval system as the default.
If the external approval system is disabled, the built-in approval system is used as the default.
Built-in approval system
On the Approval Settings page, select Built-in Approval System as the default and click Save to save the configuration.
External approval system
Enable the External Approval System. You can then select Third-party Approval as the default approval system and configure its parameters.
From the Select Approval System drop-down list, select DingTalk OA and configure the parameters.
DingTalk OA
Parameter
Description
External approval system configuration
Approval System Name
Enter a custom name for the approval system. The name cannot exceed 128 characters.
Select Approval System
Select DingTalk OA.
Approval service configuration
API Address
Enter the API address of DingTalk OA.
AppKey
Enter the AppKey of DingTalk OA.
AppSecret
Enter the AppSecret of DingTalk OA.
Click Test Connection to check the connectivity between Dataphin and the external approval system. If the test fails, troubleshoot the issue based on the error message.
Callback URL
The URL where Dataphin receives callback results from DingTalk OA. The system automatically generates the Callback URL. You can also customize it. The format is
https://<domain_name_of_your_Dataphin_deployment>/task/callback.Encoding AES Key
Enter the key used for encryption and decryption.
Click the
icon to automatically generate an Encoding AES Key.Token
Enter the token for identity verification on the DingTalk OA client.
You can click the
icon to automatically generate a token.AgentId
Enter the AgentId of DingTalk OA.
Other
Parameter
Description
External approval system configuration
Approval System Name
Enter a custom name for the approval system. The name cannot exceed 128 characters.
Select Approval System
Select Other. You can download the SDK file.
Approval service configuration
Submit Approval Request URL
The URL of the external approval system. Dataphin sends approval requests to this URL.
Access Token
The access token is the credential for accessing the external approval system. Dataphin requires this token to submit approval requests.
Click Test Connection to check the connectivity between Dataphin and the external approval system. If the test fails, troubleshoot the issue based on the error message.
Callback URL
The URL where Dataphin receives callback results from the external approval system. The system automatically generates the Callback URL. You can also customize it. The format is
https://<domain_name_of_your_Dataphin_deployment>/api/oa/bpms/integration/thirdparty/callback.Encoding AES Key
Enter the key used for encryption and decryption.
Click the
icon to automatically generate an Encoding AES Key.After you configure the parameters, click Save.