Aravinth, This can be configured OOB based on your scenario. If somebody goes to the portal to create a user, it is easy to configure approvals being required for this to succeed. If you are bringing in information from sync engine, this could be tougher since sync engine export to FIM service by-passes the AuthZ phase. If it is the first case, you can take the existing MPR that allows user creation and add the AuthZ workflow to it. If you want this to only apply to certain users than you would make a new MPR and have just these users in set used for requesting set in MPR.

Thanks a lot Glenn! My issue is the second case. I have users coming from HR System in FIM Sync. I guess, I need to sweat! Aravinth Jerry Microsoft Identity Consultant

Hi guys, I am trying to implement user provisioning to target systems based on approvals in FIM 2010. Is there any way it can be achieved OOB? Thanks in advance!Aravinth Jerry Microsoft Identity Consultant