Chat now with support
Chat with Support

Identity Manager 8.1.5 - Attestation Administration Guide

Attestation and recertification
One Identity Manager users for attestation Attestation base data Attestation policies Custom mail templates for notifications
Approval processes for attestation cases
Approval policies for attestations Approval workflow for attestations Selecting attestors Setting up multi-factor authentication for attestation Prevent attestation by employee awaiting attestation Attestation by peer group analysis Managing attestation cases
Attestation sequence Default attestation and withdrawal of entitlements User attestation and recertification Mitigating controls Configuration parameters for attestation

Deleting attestation policies

IMPORTANT: Do not delete attestation policies, for audit reasons.

Attestation policies may still be removed from the One Identity Manager database under specific conditions. Ensure that the attestation policy is archived when deleted.

For detailed information about data archiving, see the One Identity Manager Configuration Guide.

Prerequisite

  • The attestation policy is disabled.

To delete an attestation policy

  1. In the Manager, select the Attestation | Attestation policies | Disabled policies category.

  2. Select the attestation policy in the result list and run the Change master data task.

  3. Select Delete attestation policy task.

  4. Confirm the security prompt with Yes.

    The attestation policy is deleted. All associated attestation cases, approval workflows and the attestation history are deleted.

Related topics

Disabling attestation policies

Attestations are run when the schedule assigned to an attestation policy is enabled. You can disabled attestation policies to prevent attestation cases being created for individual attestation policies.

TIP: Numerous default attestation policies are supplied with One Identity Manager. Check which of the default attestation policies are relevant for your data situation when you set up your database. Disable all unnecessary attestation policies.

To disable an attestation policy

  1. In the Manager, select the Attestation | Attestation policies category.

  2. Select the attestation policy in the result list and run the Change master data task.

  3. Set Disabled.

  4. Save the changes.

Custom mail templates for notifications

A mail template consists of general master data such as target format, importance, or mail notification confidentiality, and one or more mail definitions. Mail text is defined in several languages in the mail template. This ensures that the language of the recipient is taken into account when the email is generated.

In One Identity Manager, there is a Mail Template Editor to simplify writing notifications. You can use the Mail Template Editor to create and edit mail texts in WYSIWYG mode.

Creating and editing attestation mail templates

To edit mail templates

  1. In the Manager, select the Attestation | Basic configuration data | Mail templates category.

    This shows all the mail templates that can be used for attestation cases in the result list.

  1. Select a mail template in the result list and run the Change master data task.

    - OR -

    Click in the result list.

    This opens the mail template editor.

  2. Edit the mail template.

  3. Save the changes.
Detailed information about this topic
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating