You can choose from two types of approval workflow options. You can register your callout REST URI to integrate your application management system with VMware Identity Manager, or you can integrate through the VMware Identity Manager connector.


When you configure the REST API, your application management system must be configured, and the URI available through the callout REST API that receives the requests from VMware Identity Manager.

Configure the REST API via Connector when approval workflow systems are in on-premises data centers. The connector can route approval request messages from the VMware Identity Manager cloud service to an on-premises approval application and communicate back the response message.


  1. In the administration console Catalog tab, select Settings > Approvals.
  2. Check Enable Approvals.
  3. In the Approval Engine drop-down menu, select which the REST API approval engine to use, either REST API through your Web server or REST API through the Connector.
  4. Configure the following text boxes.




    Enter the approval request handler URI of the REST API that listens for the callout requests.

    User Name

    (Optional) If the REST API requires a user name and password to access, enter the name here. If no authentication is required, you can leave user name and password blank.


    (Optional) Enter the password of the user.

    PEM-format SSL Certificate

    (Optional) If you selected REST API, and your REST API is using SSL and is on a server that does not have a public SSL certificate, paste the REST API SSL certificate in PEM format here.

What to do next

Go to the Catalog page and configure the Licensing feature for those apps that require approval before users can use the app.