Identity Manager (1IM) is configured with Active Directory (AD) as the target system.In Manager | Active Directory | Target synchronization: Active Directory, there are entries for ADSAccount, ADSAccountInADSGroup, etc.In the case of ADSAccountInADSGroup, the listed users are members of respective AD groups in 1IM, but not members of the group in AD.Why are these accounts listed as "Outstandi...
- Self Service Tools
- Knowledge Base
- My Account
- Notifications & Alerts
- Product Support
- Software Downloads
- Technical Documentation
- User Forums
- Video Tutorials
- RSS Feed
- Featured Content
- Update Connection Strings
- Impact of CVE-2021-44228
- AutoUpdate settings are disabled with the Initial installation
- Process Monitoring and Troubleshooting Guide
- 1IM Troubleshooting Steps
- Properly Interact with Support
- How to apply Hotfixes
- How to Enable TRACE Logging
- Troubleshoot Provisioning Issues
- Troubleshooting Performance
- IT Shop Logging
- How to create an SAP Trace Log
- Identity Manager Training
- Contact Support
- Contact Support
Welcome to One Identity Support
You can find online support help for*product* on an affiliate support site. Click continue to be directed to the correct support content and assistance for *product*.
- Support
- Product Support
- Identity Manager
Product Support - Identity Manager
Add to My Downloads
- file has been selected to download. You can either download the file now with any of the other files selected below or add them to your download folder in order to download them at a later time. Adding files to your download folder is recommended when downloading multiple files at a time. By downloading, you agree to the Software Transaction, License and End User License Agreements listed here.
Add to My Downloads
- file has been selected to download. You can either download the file now with any of the other files selected below or add them to your download folder in order to download them at a later time. Adding files to your download folder is recommended when downloading multiple files at a time. By downloading, you agree to the Software Transaction, License and End User License Agreements listed here.
Customers who have selected the file above have also downloaded the recommended files listed below. Popup blocker should be disabled in order to download the files listed below
Download Now
- file has been selected to download. You can either download the file now with any of the other files selected below or add them to your download folder in order to download them at a later time. Adding files to your download folder is recommended when downloading multiple files at a time. By downloading, you agree to the Software Transaction, License and End User License Agreements listed here.
Download Now
- file has been selected to download. You can either download the file now with any of the other files selected below or add them to your download folder in order to download them at a later time. Adding files to your download folder is recommended when downloading multiple files at a time. By downloading, you agree to the Software Transaction, License and End User License Agreements listed here.
Customers who have selected the file above have also downloaded the recommended files listed below. Popup blocker should be disabled in order to download the files listed below
Please wait while we verify your entitlement to this file...
Downloads restricted
Downloads are restricted from Tablet and Mobile devices. Please access this page from a non-restricted device to complete this download.
Accept Terms and Conditions
Prior to downloading this Software, you must review the Software Transaction Agreement located here and confirm, by clicking the I agree check box below, that your organization accepts and is bound by the terms and conditions of the Software Transaction Agreement for this Software.
If you purchased the licenses for this Software by executing an order form with Quest or if you have an agreement with Quest that states that all purchases are governed by such agreement, then the terms and conditions of that agreement supersedes and takes precedence over the Software Transaction Agreement.
I agree to the above.
Filter by Version or Model (Choose different product)
Notifications & Alerts
View All NotificationsOne Identity Support Critical Product Notification - Identity Manager 8.0.5, 8.1.2, 8.1.3, 8.1.4 more
One Identity Support Product Version Support - Identity Manager & Identity Manager Data Governance Edition 8.0.5, 8.1... more
One Identity Support Critical Notification - Identity Manager 8.1.x and 8.2.x more
Subscribe to product RSS feed and receive the latest Knowledge Articles, New Release Notifications and Product...
- Most Popular
- Getting Started
- Install & Upgrade
- Maintain & Configure
- Troubleshooting
- Product Life Cycle & Policies
Knowledge Articles
Technical Documentation
Notifications & Alerts
Modal title
Our technical support staff has identified the following critical information to get you started. To get the best results make sure you read through all material prior to using your One Identity Product.
After updating the certificate on the Application Server, the following error occurs:"Server Error in AppServer Application" "Certificate was not found""An unhandled exception occurred during the exception of the current web request. Please review the stack trace for more information about the error and where it originated in the code"
Auto update is used to upgrade job servers, front ends and web applications. When a hot fix, dll or upgrade of the software package is completed the files are updated in the Identity Manager database. To ensure that the other components receive those files the Auto Update is used to distribute these files.
Establish and implement a strong Identity Manager foundation in as little as six weeks with the Identity Manager Foundation Services Package. Offered through One Identity Services (OIS), you get expert, guided assistance every step of the way so that you can implement our Identity Manager solution quickly, effectively and efficiently.Straight out-of-the-box, the Identity Manager Foundation Service...
An Employee with ADSAccount is added to a Business Role with some AD groups assigned, but the Employee's ADSAccount doesn't inherit memberships from the role.This may also occur for other instances where group inheritance is required, i.e. Department, Cost center, Location.
What are the steps required to allow an Employee to have "read only" access to other Employee accounts?For example, there is a requirement for specific Employees or external consultants to view properties for Employee accounts using Manager.How can a custom application role, giving read-only access to Employee objects, be created?
The Identity Manager (OneIM) documentation explains the use of local cache as follows:"Some connectors support the use of local cache. If cache is enabled, the connector loads all the necessary data into a local database after the connection has been established with the target system. The data is loaded for each schema type. The data required for synchronization are then supplied by the loca...
Error: Unable to cast COM object of type 'System.__ComObject' to interface type 'ActiveDs.IADsUser'.
Jobs are getting frozen jobs when attempting to create ADSAccounts. The following error is displayed in the logs:[System.InvalidCastException] Unable to cast COM object of type 'System.__ComObject' to interface type 'ActiveDs.IADsUser'. This operation failed because the QueryInterface call on the COM component for the interface with IID '{GUID}' failed due to the following ...
What are product owners, and what does it mean when a product owner is assigned?Adding an owner to a service item via IT Shop adds them to other service items as well, why?Can a different product owner be assigned to a service item?When and why are product owner roles created?
How can administrators locate security certificates associated with the One Identity Manager Web Portal?
Below is a list of the recommended software along with any documentation that will help with the install process to bring your product to the version referenced.
Identity Manager helps you simplify the access management process by leveraging an automated architecture. With Identity Manager, you can manage user identities, privileges and security across the enterprise. It puts you in control of identity management and takes the burden off your IT staff.
Establish and implement a strong Identity Manager foundation in as little as six weeks with the Identity Manager Foundation Services Package. Offered through One Identity Services (OIS), you get expert, guided assistance every step of the way so that you can implement our Identity Manager solution quickly, effectively and efficiently.Straight out-of-the-box, the Identity Manager Foundation Service...
Error: Unable to cast COM object of type 'System.__ComObject' to interface type 'ActiveDs.IADsUser'.
Jobs are getting frozen jobs when attempting to create ADSAccounts. The following error is displayed in the logs:[System.InvalidCastException] Unable to cast COM object of type 'System.__ComObject' to interface type 'ActiveDs.IADsUser'. This operation failed because the QueryInterface call on the COM component for the interface with IID '{GUID}' failed due to the following ...
How can administrators locate security certificates associated with the One Identity Manager Web Portal?
Identity Manager Language Pack (in ZIP format) applies to all 9.2.x versions. The Identity Manager Language Pack contains ITShop translations in these languages: Chinese, Dutch, French, Italian, Japanese, Korean, Norwegian, Polish, Portuguese, Russian, Spanish, Spanish (LA), Swedish, and Danish. Please refer to the Support Portal knowledgebase article 339163 for additional information.
Technical Support has reviewed all the support information and has identified the most popular helpful tips and how to videos or articles to ensure you get the most out of your One Identity Product.
Identity Manager (1IM) is configured with Active Directory (AD) as the target system.In Manager | Active Directory | Target synchronization: Active Directory, there are entries for ADSAccount, ADSAccountInADSGroup, etc.In the case of ADSAccountInADSGroup, the listed users are members of respective AD groups in 1IM, but not members of the group in AD.Why are these accounts listed as "Outstandi...
After updating the certificate on the Application Server, the following error occurs:"Server Error in AppServer Application" "Certificate was not found""An unhandled exception occurred during the exception of the current web request. Please review the stack trace for more information about the error and where it originated in the code"
Unable to add user membership to AADGroup with IsMailEnabled = True and IsSecurityEnabled = True
An Employee with ADSAccount is added to a Business Role with some AD groups assigned, but the Employee's ADSAccount doesn't inherit memberships from the role.This may also occur for other instances where group inheritance is required, i.e. Department, Cost center, Location.
What are the steps required to allow an Employee to have "read only" access to other Employee accounts?For example, there is a requirement for specific Employees or external consultants to view properties for Employee accounts using Manager.How can a custom application role, giving read-only access to Employee objects, be created?
When a delegation is made by an attester, the Workflow for the attestation case shows that it can be attested by the user who created the delegation and the one whom its delegated to. This looks to be incorrect.
The Identity Manager (OneIM) documentation explains the use of local cache as follows:"Some connectors support the use of local cache. If cache is enabled, the connector loads all the necessary data into a local database after the connection has been established with the target system. The data is loaded for each schema type. The data required for synchronization are then supplied by the loca...
When using the approval by mail option for Attestations, the approval emails will have a deep link to the attestation decision page, when attempting to open this link, the web page results in a grey screen.
Error: Unable to cast COM object of type 'System.__ComObject' to interface type 'ActiveDs.IADsUser'.
Jobs are getting frozen jobs when attempting to create ADSAccounts. The following error is displayed in the logs:[System.InvalidCastException] Unable to cast COM object of type 'System.__ComObject' to interface type 'ActiveDs.IADsUser'. This operation failed because the QueryInterface call on the COM component for the interface with IID '{GUID}' failed due to the following ...
What are product owners, and what does it mean when a product owner is assigned?Adding an owner to a service item via IT Shop adds them to other service items as well, why?Can a different product owner be assigned to a service item?When and why are product owner roles created?
The information below represents the most common issues customers are encountering or recent resolutions to help you trouble shoot your One Identity Product.
Identity Manager (1IM) is configured with Active Directory (AD) as the target system.In Manager | Active Directory | Target synchronization: Active Directory, there are entries for ADSAccount, ADSAccountInADSGroup, etc.In the case of ADSAccountInADSGroup, the listed users are members of respective AD groups in 1IM, but not members of the group in AD.Why are these accounts listed as "Outstandi...
After updating the certificate on the AppServer, the below error may appear: Server Error in '/AppServer' Application. Keyset does not exist System.Security.Cryptography.CryptographicException: Keyset does not exist
After updating the certificate on the Application Server, the following error occurs:"Server Error in AppServer Application" "Certificate was not found""An unhandled exception occurred during the exception of the current web request. Please review the stack trace for more information about the error and where it originated in the code"
After upgrading from Identity Manager version 9.2 to 9.2.1, it is observed that the ADS connector will only handle the first 1500 members of an ADSGroup. Any memberships above 1500 are marked as outstanding. Please note that this only affects Identity Manager version 9.2.1
The lock timeout for specific statements is not long enough, for example: QBM-K-QBMConstraintEnable2
An Employee with ADSAccount is added to a Business Role with some AD groups assigned, but the Employee's ADSAccount doesn't inherit memberships from the role.This may also occur for other instances where group inheritance is required, i.e. Department, Cost center, Location.
What are the steps required to allow an Employee to have "read only" access to other Employee accounts?For example, there is a requirement for specific Employees or external consultants to view properties for Employee accounts using Manager.How can a custom application role, giving read-only access to Employee objects, be created?
The Identity Manager (OneIM) documentation explains the use of local cache as follows:"Some connectors support the use of local cache. If cache is enabled, the connector loads all the necessary data into a local database after the connection has been established with the target system. The data is loaded for each schema type. The data required for synchronization are then supplied by the loca...
After logging into the angular password reset portal, the end user attempts to click on Manage password questions, this results in the following error: TypeError: Cannot read properties of undefined (reading 'subscribe')
Duplicates in JobHistory appear sporadically. If such duplicates exist and historization process is started, the move of data from RawJobHistory to HistoryJob on an HDB fails because of PK constraint violation.Error:[810023] Error running statement: exec HDB_PProcessGroup '008FBECF-229B-4059-9D64-6BE2618A0334'[810143] Database error 3903: The ROLLBACK TRANSACTION request has no correspondi...
Product Life Cycle
| Version | Full Support as of | Limited Support as of | Support Discontinued |
|---|---|---|---|
| 9.2.1 | 6/3/2024 | ||
| 9.1.3 | 3/18/2024 | ||
| 9.0.x LTS | 8/12/2022 | 9/30/2025 | 7/1/2027 |
| 9.1.2 | 12/1/2023 | 5/1/2025 | 12/1/2025 |
| 9.2 | 10/20/2023 | 4/30/2025 | 10/31/2025 |
| 9.1.1 | 4/14/2023 | 10/31/2024 | 4/30/2025 |
| 9.1 | 9/30/2022 | 3/31/2024 | 9/30/2024 |
| Earlier product versions not listed are considered discontinued. | |||
The Product Support Life Cycle table above describes the phase during which products are eligible for product support and new release downloads.
As a result of Quest's recent divestiture from Dell, Quest acquired a number of products from Dell. Some of these legacy products found on this website may still contain Dell branding. However, these products are now owned and supported solely by Quest and not Dell. Dell is not affiliated with these products or services and any services Quest provides for these products is independent of Dell.
Product Support Policies
The Product Support Lifecycle describes the phases during which our products are eligible for patches (fixes), support and downloads from the Support Portal.
It is our policy to provide support and fixes in current versions of our products when you are under a current support agreement. Fixes to older versions are at our discretion. We strive to put resources behind the most recent product releases in order to continually improve and enhance the value of our products.
We will attempt to answer questions on older versions of our products provided resources are available; however, if you are using a discontinued version, we encourage you to upgrade to the currently supported version of the product.
Our usual support policy is to provide support on both the current (n) and prior (n-1) versions of our products. Refer to the product lifecycle table on your Product Support Page or Knowledge Base for more information.
Full Support
- Product is fully supported, generally available release/version.
- Includes most current released version of a product and one or more prior releases.
- Enhancement requests for this release are accepted and may be considered for future releases.
- Maintenance releases and/or hot fixes are periodically made available for this release.
- Release/version is fully supported by both Support and Development.
- Release/version is available for download from Support Portal.
Limited Support
- Support is available for this release/version, and we will use best efforts to provide known workarounds or fixes.
- No new code fixes will be generated except under extreme circumstances and at our discretion.
- Enhancement requests are not accepted.
- You are encouraged to plan an upgrade to a release/version on "Full Support".
- Release/version is available for download from the Support Portal.
Discontinued
- Includes release/versions which are retired or discontinued.
- No new patches or fixes will be created for this release.
- Release is not available for download from the Support Portal.
- To ensure you are fully supported, customers should upgrade to a product version which is in Full Support.
- Support is here to assist with general upgrade questions, however, should a detailed upgrade plan be necessary, engagement by our Professional Services division may be required.
- Support is not obligated to provide assistance on this version of the product.
Product Enhancements
If you are interested in submitting product enhancement requests, you can do so by creating a case with support. When we receive a product enhancement request, the Support Engineer will work to define and clearly document the request. Once documented, the request will be submitted into the enhancement review system, the identification number will be provided to the submitter, and the support case will be closed.
Product Management will review the open enhancement requests on a periodic basis and consider them for inclusion in a future product release. Product enhancements will not be considered or implemented in current or prior product releases. There is no guarantee that a specific enhancement request will be implemented in a future version of our product. It is at our discretion if a certain enhancement will be offered for an additional charge or as a chargeable option.
Product Defects
If your issue is determined to be a defect in the product, it is recorded in our defect tracking system, a unique Defect Identifier (ID) will be provided to you and the support case will be closed. Notifications of new product releases will be emailed to you as long as you who have configured your profile to receive product notifications. Release Notes for new releases of products will contain the list of Defect Identifiers that were addressed in the release. You can review the release notes or search the Knowledge Base on the Support Portal using your Defect Identifier to see if the issue has been addressed. We do not guarantee that all defects identified will be fixed in a future release of the product.
Our products have license keys generated for their use. Some products require a new license key when upgrading to a new release and/or patch. We also recommend that prior to any migration or upgrade of products, new licenses are confirmed as functioning properly as some license keys are machine and machine name specific.
If you have questions regarding licensing of a product please complete the form available on the Support Portal Licensing Page. A Software Licensing Representative will respond to your query within 24 hours.
You may also email the Software Licensing team: license@quest.com.
Support for Trial Users
We offer software trials on selected products for testing purposes. Support for trial users is limited to 30 days from the registration date. Cases for your trial product may only be submitted during the first 30 days of your testing period. You will still have unlimited access to our Support Portal for accessing the Knowledge Base and Product Pages.
Customizations policy for Software and Hardware products
A customization indicates functionality and configurations added to a product that are not provided as part of the core product release and, as such, would be outside the scope of normal support and maintenance. Customizations may take the form of new or modified scripts used within or alongside our products, as well as additional functionality such as custom reports, dashboards, rules, automated actions, etc. developed by you, your partners, or our Professional Services Organization.
Support and Customizations
We do not perform or maintain customizations. The design and development of customizations to our products is your responsibility. Assistance from Support will be limited to helping ensure that the product's functionality which enables the addition of customizations is functioning as expected. Alternatively, you may obtain guidance through product specific community sites or the Support Knowledge Base.
Advanced Assistance
If more thorough and detailed assistance is needed to design and develop customizations, we recommend that you engage our Professional Services Organization or fully certified partners to assist. Their expertise in designing customized solutions will ensure customers receive maximum value and product adoption. In addition to providing post-implementation expert services, Professional Services also offers a variety of pre-packaged customizations for some products which may meet your specific requirements.
Training & Certification
We recommend that you obtain the appropriate product training before attempting to design, develop, and implement any customization to our products. Our training courses will equip you with the necessary knowledge and ability to design and implement effective changes to our products. For more detail on the training services available, please refer to Training & Certification Services .
Maintaining Customizations
Careful consideration should be given to all customizations during future migration or upgrade exercises to new product and platform versions. Customizations could inhibit the upgrade itself and may require a level of re-work to continue functioning properly. Support does not take ownership for any customizations. We strongly encourage you to document and maintain records on any implemented customization work. These records can be useful in isolating problems that may be attributable to the customization or a defect in the core product.
Support Policy on Virtualization
Virtualization is a technique for hiding the physical characteristics of computing resources from the way in which other systems, applications or end users interact with those resources. It is able to make a single physical resource, such as a server, operating system, application or storage device, appear to function as multiple logical devices. It can also make multiple physical resources such as storage devices or servers appear as a single logical resource. As a result virtualization enables IT departments to increase the utilization of resources, increase high availability, and simplify back-up, systems administration and recovery procedures. It also allows IT departments to be more responsive to the dynamic needs of the business. Examples of virtualization technologies include VMware ESX Server, Citrix/XenServer and Microsoft Windows Server 2008 Hyper-V.
Our products leverage the binary compatibility offered through virtualization technologies, which provide complete transparency to the operating systems and applications deployed. As a result, for all casework received where the Software product is being used in a virtual environment, we will assume that the problem is common to both native and virtual operating environments, and that we will only require the customer to recreate the problem in a native environment if and when there is reason to believe that the problem is unique to the virtual environment itself.
From a purely functional perspective, our products will operate in exactly the same way, however we can make no guarantees with respect to performance or scalability in a virtualization environment running multiple virtual instances. Configuration aspects such as CPU, memory availability, I/O subsystem and network infrastructure can all influence such a deployment, which should be given careful consideration to ensure the virtual layer has the necessary resources available to provide a satisfactory user experience.
Support Policy on Third-Party Software
We are committed to providing products which work on the latest platforms and technologies available in the industry today. We work closely with technology vendors to ensure earliest possible compatibility with our solutions. We provide full details of all systems requirements, together with platform and third-party product versions supported with our products, in the Release Notes published for each product. These include operating system versions, service pack levels, mail clients or server versions, database versions, browsers and other related technology supported and at which particular version level our products have been formally tested and certified to run against. The support of future platform versions, new service packs and other related technologies would be taken into consideration and addressed during the regular product maintenance and release cycles of our products. This provides ongoing upward compatibility of our products as used in customer environments. It should be noted therefore that there could be a delay between the availability of the latest platform technology release or service patch, and the product version certified to operate against this. Please contact Support should you have any questions with regards to the current support status of any product and a particular related platform, patch or third-party product support not explicitly documented in our release notes.
For more information about the latest third-party platforms and versions supported, please review the System Requirements section of the release notes for your product or search our Knowledge Base on the Support Portal. Please note that while we do not directly or officially support third-party software, we work closely with many other providers to ensure our customers receive the best possible service at all times.
Regional software license agreement applicable to your use of the software is available below (including software preinstalled on hardware or made available to you by download, disk media or otherwise, at no additional cost).
Click here to find your regional agreement.
New Product Association
You have been redirected to xxxxx which contains support information for yyyyy.
Do not show these messages again