You can delete account definitions if they are not assigned to target systems, employees, hierarchical roles or any other account definitions.
To delete an account definition
1. Remove automatic assignments of the account definition from all employees.
a. In One Identity Manager, select the Epic healthcare| Basic configuration data | Account definitions | Account definitions category.
b. Select an account definition in the result list.
c. Select the Change master data task.
d. Disable the Automatic assignment to employees option on the General tab.
e. Save the changes.
2. Remove direct assignments of the account definition to employees.
a. In One Identity Manager, select the Epic healthcare | Basic configuration data | Account definitions | Account definitions category.
b. Select an account definition in the result list.
c. Select the Assign to employees task.
d. Remove employees from Remove assignments.
e. Save the changes.
3. Remove the account definition's assignments to departments, cost centers, and locations.
a. In One Identity Manager, select the Epic healthcare | Basic configuration data | Account definitions | Account definitions category.
b. Select an account definition in the result list.
c. Select the Assign organizations task.
d. In Remove assignments, remove the relevant departments, cost centers, and locations.
e. Save the changes.
4. Remove the account definition's assignments to business roles.
a. In One Identity Manager, select the Epic healthcare | Basic configuration data | Account definitions | Account definitions category.
b. Select an account definition in the result list.
c. Select the Assign business roles task.
Remove the business roles in Remove assignments.
d. Save the changes.
5. If the account definition was requested through the IT Shop, it must be canceled and removed from all IT Shop shelves.
For more detailed information about unsubscribing requests, see the One Identity Manager Web Portal User Guide.
To remove an account definition from all IT Shop shelves
a. In One Identity Manager, select the Epic healthcare | Basic configuration data | Account definitions | Account definitions (non role-based login) category.
- OR -
In One Identity Manager, select the Entitlements | Account definitions (role-based login) category.
b. Select an account definition in the result list.
c. Select the Remove from all shelves (IT Shop) task.
d. Confirm the security prompt with Yes.
e. Click OK.
The account definition is removed from all shelves by One Identity Manager Service . All requests and assignment requests with this account definition are canceled in the process.
6. Remove the account definition assignment as required account definition for another account definition. As long as the account definition is required for another account definition, it cannot be deleted. Check all the account definitions.
a. In One Identity Manager, select the Epic healthcare | Basic configuration data | Account definitions | Account definitions category.
b. Select an account definition in the result list.
c. Select the Change master data task.
d. Remove the account definition in the Required account definition menu.
e. Save the changes.
7. Remove the account definition's assignments to target systems.
a. In One Identity Manager, select the client in the Epic healthcare | Connection.
b. Select the Change master data task.
c. Remove the assigned account definitions on the General tab.
d. Save the changes.
8. Delete the account definition.
a. In One Identity Manager, select the Epic healthcare | Basic configuration data | Account definitions | Account definitions category.
b. Select an account definition in the result list.
c. Click to delete an account definition.
One Identity Manager provides you with support for creating complex password policies, for example, for system user passwords, the employees' central password as well as passwords for individual target systems. Password polices apply not only when the user enters a password but also when random passwords are generated.
Predefined password policies are supplied with the default installation that you can user or customize if required. You can also define your own password policies.
NOTE: To set password for Epic EMP user accounts, the target Epic system should be using Epic Native authentication
Detailed information about this topic
You can customize predefined password policies to meet your own requirements, if necessary.
Password for logging in to One Identity Manager
The One Identity Manager password policy is applied for logging in to One Identity Manager. This password policy defined the settings for the system user passwords (DialogUser.Password and Person.DialogUserPassword) as well as the access code for a one off log in on the Web Portal (Person.Passcode).
NOTE: The One Identity Manager password policy is marked as the default policy. This password policy is applied if no other password policy can be found for employees, user accounts or system users. For detailed information about password policies for employees, see the One Identity Manager Identity Management Base Module Administration Guide.
Password policy for forming employees' central passwords
An employee's central password is formed from the target system specific user accounts by respective configuration. The Employee central password policy password policy defines the settings for the (Person.CentralPassword) central password. Members of the Identity Management | Employees | Administrators application role can adjust this password policy.
IMPORTANT: Ensure that the Employee central password policy password policy does not violate the system-specific requirements for passwords. For detailed information about password policies for employees, see the One Identity Manager Identity Management Base Module Administration Guide.
Password policies for user accounts
Predefined password policies are provided, which you can apply to the user account password columns of the user accounts.
IMPORTANT: If you do not use password policies that are specific to the target system, the One Identity Manager password policy standard policy applies. in this case, ensure that the default policy does not violate the target systems requirements.
The Epic password policy is predefined for Epic. You can apply this password policy to Epic user accounts (EPCUser.Password) of an Epic connection.
If the clients' password requirements differ, it is recommended that you set up your own password policies for each client.
Furthermore, you can apply password policies based on the account definition of the user accounts or based on the manage level of the user accounts.
The Epic password policy is predefined for Epic.
You can apply this password policy to Epic user accounts (EPCUser.Password) of an Epic Connection. If the clients' password requirements differ, it is recommended that you set up your own password policies for each client. Furthermore, you can apply password policies based on the account definition of the user accounts or based on the manage level of the user accounts.
The password policy that is to be used for a user account is determined in the following sequence
1. Password policy of the account definition of the user account
2. Password policy of the manage level of the user account
3. Password policy for the client of the user account
4. Password policy One Identity Manager password policy (default policy)
IMPORTANT: If you do not use password policies that are specific to the target system, the One Identity Manager password policy standard policy applies. in this case, ensure that the default policy does not violate the target systems requirements.
To reassign a password policy
1. Select Epic healthcare | Basic configuration data | Password policies in One Identity Manager.
2. Select the password policy in the result list.
3. Select Assign objects.
4. Click Add in the Assignments section and enter the following data
Table 11: Cap
| Property |
Description |
| Apply to |
Application scope of the password policy.
To specify an application scope
a. Click next to the text box.
b. Select one of the following references under
Table:
The table that contains the base objects of synchronization.
Select the TSBAccountDef table to apply the password policy based on the account definition.
Select the TSBBehavior table to apply the password policy based on the manage level.
c. Select the table that contains the base objects under Apply to.
- If you have selected the table containing the base objects of synchronization, next select the specific target system.
- If you have selected the TSBAccountDef table, next select the specific account definition.
- If you have selected the TSBBehavior table, next select the specific manage level.
d. Click OK. |
| Password column |
The password column's identifier. |
| Password policy |
The identifier of the password policy to be used. |
5. Save the changes.
To change a password policy's assignment
1. Select Epic healthcare | Basic configuration data | Password policies in One Identity Manager.
2. Select the password policy in the result list.
3. Select Assign objects.
4. Select the assignment you want to change in Assignments.
5. Select the new password policy to apply from the Password Policies menu.
6. Save the changes.
The EMPTemplate is deleted from the One Identity Manager database and all the associated EMPTemplate to the Epic User.
