One Identity Manager provides default attestation policies for default attestation of new users and recertification of all employees stored in the One Identity Manager database. In addition to this, default attestation policies are provided through which various roles, memberships in roles, and system entitlements can be attested.
To display default attestation policies
-
In the Manager, select the Attestation | Attestation policies | Predefined category.
You can customize the following properties for default attestation policies:
-
Approval policies (if several approval policies can be assigned)
-
Owner
-
Processing time
-
Risk index
-
Calculation schedule
-
Deactivated
-
Close obsolete tasks automatically
-
Obsolete tasks limit
-
Reason for decision
-
Condition
-
Approval by multi-factor authentication
NOTE: You can edit attestation policies, whose condition is stored as a definition (XML), in the Web Portal. The definition (XML) cannot be edited in the Manager. For detailed information, see One Identity Manager Web Portal User Guide.