Requesting from templates
You can use your own request templates or system templates for making requests. This helps simplify proper provisioning for a particular job or function. For example, a template may contain all the products a new identity needs to get started. If you use a template for a request, you are not obliged to request all the products in the template. You only have to select the products you want from the template. For more information, see Request templates.
To request products using a template
-
In the menu bar, click Request > My Requests.
-
On the My requests page, click Start a new request.
-
On the Request page, on the bottom right, click Actions > Select a request template.
-
In the Choose a template dialog, next to the required request template, click Add to cart.
TIP: If you want to display all of the content of the request templates, click 
next to the request template.
-
On the My Shopping Cart page, click Submit.
Related topics
Requesting privileged access
You can use the Privileged access requests service category to request privileged access to high-security systems (Privileged Account Management systems).
TIP: For more information on the topic of Privileged Account Management, see the One Identity Manager Administration Guide for Privileged Account Governance.
To request privileged access
-
In the menu bar, click Request > My Requests.
-
On the My requests page, click Start a new request.
-
On the Request page, click Privileged access requests.
-
On the Request page, select how you want to access the system by selecting the check box in front of the corresponding option:
-
Password release request: Request a temporary password.
-
Remote desktop session request: Request temporary access through a remote desktop connection.
-
SSH key request: Request temporarily valid SSH key.
-
SSH session request: Request temporary access through an SSH session.
-
Telnet session requests: Request temporary access using a Telnet session.
-
Click Add to cart.
-
In the new dialog, next to PAM user account, click Assign/Change.
-
In the PAM user account dialog, select the PAM user account that you want to use for PAM access.
-
Depending on the type of access you have selected, perform one of the following actions:
-
Perform the following actions:
-
Next to Account to access, click Assign.
-
In the Account to access dialog, select which access you want to request, either PAM directory account or a PAM Asset account.
-
Click the PAM asset account or PAM directory account you want to access.
-
(Optional) In the Comment field, enter a comment, for example, to justify why you are requesting this access.
-
In the Valid from field, specify the time from which you want the access to be valid or clear the check box so that access is valid from the time of this request.
TIP: Use the icons next to the date field to select the date and time from the calendar or a list.
-
In Checkout duration, enter the number of minutes for which the access is valid.
NOTE: This duration refers to your entry in the Valid from field. For example, if you have specified that the access is valid from 12 noon tomorrow and should be valid for 60 minutes, then the validity period will expire at 1 pm tomorrow.
-
Click Save.
-
(Optional) Repeat the steps for all other users and access types.
-
On the My Shopping CartShopping Cart page, click .
Once the request has been approved, a button will appear in the request details pane of the request history (see Displaying request history) that you can use to log in to the Privileged Account Management system to obtain the login credentials.
Related topics
Requesting Starling 2FA tokens
The Starling Two-Factor Authentication is a multi-factor authentication and can be used when requesting products or approving attestations in the Web Portal. This reduces the risk of unauthorized persons requesting critical products or approving attestations in your name.
To use multi-factor authentication, you must have a Starling 2FA token. You can request this product in the Web Portal. The following data is required to request a Starling 2FA token:
- Your mobile phone number
- Your country of residence
- Your default email address
You can enter this information under My profile > Contact data. For more information, see Editing your profile information.
To request a Starling 2FA token
NOTE: Each identity can request only one new Starling 2FA token. If your mobile phone number changes, you must unsubscribe your Starling 2FA token (see Unsubscribing products) and request it again.
-
In the menu bar, click Request > My Requests.
-
On the My requests page, click Start a new request.
-
Click Access Lifecycle on the Request page.
-
Click Add to the cart next to the product New Starling 2FA token.
-
In the New Starling 2FA token dialog, check the mobile phone number and country code. If you have not saved a mobile phone number or the country in your profile, enter your mobile number in the Mobile phone field. Next to Country, click Assign and select a country.
-
Click OK.
-
On the My Shopping Cart page, click Submit.
The request is forwarded to your manager for approval. Once your manager has granted approval, you will receive a text message on your mobile phone with a link to a multi-factor authentication app.
-
Install the app on your smartphone:
-
Open the text message and click the link.
-
Download the multi-factor authentication app to your smartphone.
-
Open the app and enter your country code and the mobile phone number.
-
Confirm the given data and enter your email address.
-
Reconfirm and select whether to use telephone or text message contact.
After successful installation, you will receive a registration code.
You can now use the app for generating a security code.
Related topics
Requesting products that require multi-factor authentication
Multi-factor authentication can be used for specific security-critical requests. Depending on the configuration, either the requester, the order recipient, or the approver must authenticate themselves using an additional security code. Define which products require this authentication in your service items.
To use multi-factor authentication, you must have a Starling 2FA token. For more information, see Requesting Starling 2FA tokens.
To request a product that requires multi-factor authentication
-
In the menu bar, click Request > My Requests.
-
On the My requests page, click Start a new request.
-
On the Request page, click a service category containing products that require multi-factor authentication.
-
Place the products you want in the shopping cart (see Adding products to the shopping cart) and, if necessary, make further settings in the shopping cart (see Managing products in the shopping cart).
-
On the My Shopping Cart page, click Submit.
-
On the Terms of use page, enable the I have read and understood the terms of use option and click Accept.
A few minutes may pass before you are prompted to enter a security code.
-
Perform one of the following actions:
-
Click Authenticate with Starling 2FA app.
-
Click Send SMS or Phone call, enter the security code, and click Next.
Related topics
