Chat now with support

Live-Hilfe anfordern
Registrierung abschließen

Anmelden

Preisinformationen anfragen

Vertrieb kontaktieren

Identity Manager 9.3 - Attestation Administration Guide

Inhaltsnavigation

Attestation and recertification

One Identity Manager users for attestation Attestation base data Attestation types

Default attestation types Additional tasks for attestation types

Overview of the attestation type Assigning attestation procedures

Attestation procedure

General main data of an attestation procedure Templates for attestation procedures Providing information about attestation objects

Defining reports for attestation Defining snapshot content

Default attestation procedures Additional tasks for attestation procedures

Overview of the attestation procedure Assigning approval policies to attestation procedures Creating a copy

Attestation schedules

Default schedules Assigning attestation policies Assigning policy collections Schedule overview Starting schedules immediately

Compliance frameworks

Additional tasks for compliance frameworks

Compliance framework overview Assigning attestation policies

Chief approval team Attestation policy owners Standard reasons for attestation

Predefined standard reasons for attestations

Providing terms of use for attestation

Assigning files to terms of use Displaying the terms of use overview

Attestation policies

General main data of attestation policies Specifying risk indexes for attestation guidelines Default attestation policies Additional tasks for attestation policies

The attestation policy overview Assigning approvers to attestation policies Assigning compliance frameworks to attestation policies Mitigating controls

Assigning mitigating controls Creating mitigating controls for attestation policies

Running attestation for single objects Showing or hiding conditions Copy attestation policies Showing selected objects Deleting attestation policies

Disabling attestation policies

Sample attestation

Creating, editing, deleting samples General main data of samples Managing sampling data Generating sampling data automatically Using samples with attestation policies Displaying the sample overview Default sample for attesting memberships in system entitlements Default sample for attesting identities

Grouping attestation policies

Creating and editing policy collections General main data of policy collections Assigning policy collections to attestation policies Disabling policy collections Deleting policy collections Default policy collections

Custom mail templates for notifications

Creating and editing attestation mail templates General properties of a mail template Creating and editing a mail definition

Using base object properties Use of hyperlinks in the Web Portal

Default functions for creating hyperlinks

Customizing email signatures

Copying mail templates for attestation Displaying attestation mail templates previews Deleting mail templates for attestation Custom notification processes

Suspending attestation Automatic attestation of policy violations

Approval processes for attestation cases

Approval policies for attestations

General main data of approval policies Default approval policies Editing approval workflows Validity checking Copying approval policies

Approval workflow for attestations

Working with the Workflow Editor Setting up approval workflows

Editing approval levels Editing approval steps Properties of an approval step Connecting approval levels

Copying approval workflows Deleting approval workflows The approval workflow overview Default approval workflows

Selecting attestors

Default approval procedures

Determining attestors via attestation objects Determining attestors via the primary role of the identity to attest Determining attestors using the service item of the attestation object Determining attestors via attestation object managers Determining managers or members of a role as attestors Determining attested identities as attestors Determining identities linked to user accounts as attestors Determining target system managers as attestors Determining attestors via product owners Determining attestors via owners of the attestation objects Determining owners or approvers of attestation policies Calculated approval Approvals to be made externally Waiting for further approval

Setting up approval procedures

General main data of an approval procedure Queries for finding attestors Specifying permitted approval procedures for tables

Overview of approval procedures Copying an approval procedure Deleting approval procedures Determining the responsible attestors

Setting up multi-factor authentication for attestation Prevent attestation by identity awaiting attestation Automatic acceptance of attestation approvals Phases of attestation

Setting up the staging phase Criteria for the Staging phase Setting up the challenge phase Setting up withdrawal of entitlements

Attestation by peer group analysis

Configuring peer group analysis for attestations

Approval recommendations for attestations

Criteria for approval recommendations for attestation Configuring approval recommendations for attestation

Managing attestation cases

Getting more information Appointing other attestors Escalating an attestation case Attestors cannot be established Automatic approval on timeout Halting an attestation case on timeout Attesting by chief approval team

Attestation sequence

Starting attestation Attestation case overview Approval sequence Attestation history Modifying approval workflows for pending attestation cases Closing attestation cases for deactivated identities Deleting attestation cases Notifications in the attestation case

Requesting attestation Reminding attestors Scheduling attestation requests Reminding attestors about attestation objects Granting or denying attestation cases Notifying delegates Canceling attestation cases Escalation of attestation cases Delegating attestations Rejecting approvals Notifications with questions Notifications from additional attestors Link for verifying new external users Default mail templates

Attestation by mail

Processing attestation mails

Adaptive cards attestation

Using adaptive cards for attestations Adding and deleting recipients and channels Creating, editing, and deleting adaptive cards for attestations Creating, editing, and deleting adaptive cards templates for attestations General main data for adaptive cards Deploying and evaluating adaptive cards for attestations Disabling adaptive cards

Approving attestation cases in the Manager Displaying attestation cases of an attestor Displaying information about attestation objects Assigning extended properties to attestation cases Displaying incomplete attestation runs Canceling incomplete attestation runs Displaying canceled attestation runs Reports about attestations

Default attestations

Configuring withdrawal of entitlements

Attesting system entitlements System role attestation Application role attestation Business role attestation

Configuring sample attestation of identities and their entitlements User attestation and recertification

One Identity Manager users for attesting and recertifying users Configuring user attestation and recertification Attesting new users

Self-registration of new users in the Web Portal Adding new identities using a manager or administrator for identities Importing new identity main data Scheduled attestation Limiting attestation objects for certification

Recertifying existing users

Preparing for recertification The recertification sequence Limiting attestation objects for recertification

Certifying new roles and organizations

One Identity Manager users for certifying roles and organizations Configuring certification of new departments Configuring certification of new cost centers Configuring certification of new locations Configuring certification of new business roles Configuring certification of new application roles

Mitigating controls for attestation policies

General main data of mitigating controls Additional tasks for mitigating controls

Mitigating controls overview Assigning attestation policies

Calculating mitigating controls for attestation policies

Setting up attestation in a separate database

Requirements for the central database Setting up work databases Setting up synchronization between central and work databases Setting up and running attestations in the work database

Configuration parameters for attestation

Default policy collections

One Identity Manager provides a default policy collection and default attestation policies for regular attestation of identities with all their entitlements and memberships.

To display default policy collections

In the Manager, select the Attestation > Policy collections > Predefined category.

You can alter the following default policy collection properties to suit your company requirements.

Calculation schedule
Disabled

Related topics

Custom mail templates for notifications

For more information about creating and editing mail template, see the One Identity Manager Operational Guide.

A mail template consists of general main data such as target format, importance, or mail notification confidentiality, and one or more mail definitions. Mail text is defined in several languages in the mail template. This ensures that the language of the recipient is taken into account when the email is generated.

Creating and editing attestation mail templates

To create and edit mail templates

In the Manager, select the Attestation > Basic configuration data > Mail templates category.

This shows all the mail templates that can be used for attestation cases in the result list.

Select a mail template in the result list and run the Change main data task.

- OR -

Click in the result list.

This opens the mail template editor.
Edit the mail template.
Save the changes.

Detailed information about this topic

General properties of a mail template

The following general properties are displayed for a mail template:

Table 14: Mail template properties
Property	Meaning
Mail template	Name of the mail template. This name will be used to display the mail templates in the administration tools and in the Web Portal. Translate the given text using the button.
Base object	Mail template base object. A base object only needs to be entered if the mail definition properties of the base object are referenced. Use the AttestationCase or AttestationHelper base object for notifications about attestation.
Report (parameter set)	Report, made available through the mail template.
Description	Mail template description. Translate the given text using the button.
Target format	Format in which to generate email notification. Permitted values are: HTML: The email notification is formatted in HTML. Text formats, for example, different fonts, colored fonts, or other text formatting, can be included in HTML format. TXT: The email notification is formatted as text. Text format does not support bold, italics, or colored font, or other text formatting. Images displayed directly in the message are not supported.
Design type	Design in which to generate the email notification. Permitted values are: Mail template: The generated email notification contains the mail body in accordance with the mail definition. Report: The generated email notification contains the report specified under Report (parameter set) as its mail body. Mail template, report in attachment: The generated email notification contains the mail body in accordance with the mail definition. The report specified under Report (parameter set) is attached to the notification as a PDF file.
Importance	Importance for the email notification. Permitted values are Low, Normal, and High.
Confidentiality	Confidentiality for the email notification. Permitted values are Normal, Personal, Private, and Confidential.
Can unsubscribe	Specifies whether the recipient can unsubscribe email notification. If this option is set, the emails can be unsubscribed through the Web Portal.
Deactivated	Specifies whether this mail template is disabled.
Mail definition	Selects the mail definition in a specific language. NOTE: If the Common \| MailNotification \| DefaultCulture configuration parameter is set, when the template is opened, the mail definition is loaded and displayed in the email notifications default language.
Language	Language that applies to the mail template. The recipient's language preferences are taken into account when an email notification is generated.
Subject	Subject of the email message.
Mail body	Content of the email message.

Verwandte Dokumente

The document was helpful.

Bewertung auswählen

I easily found the information I needed.

Bewertung auswählen

© 2025 One Identity LLC. ALL RIGHTS RESERVED. Nutzungsbedingungen Datenschutz Cookie Preference Center