Chat now with support
Chat with Support

Identity Manager 9.0 LTS - Attestation Administration Guide

Attestation and recertification
One Identity Manager users for attestation Attestation base data Attestation types Attestation procedure Attestation schedules Compliance frameworks Chief approval team Attestation policy owners Standard reasons for attestation Attestation policies Sample attestation Grouping attestation policies Custom mail templates for notifications Suspending attestation
Approval processes for attestation cases
Approval policies for attestations Approval workflow for attestations Selecting attestors Setting up multi-factor authentication for attestation Prevent attestation by employee awaiting attestation Attestation by peer group analysis Managing attestation cases
Attestation sequence Default attestation and withdrawal of entitlements User attestation and recertification Mitigating controls Setting up attestation in a separate database Configuration parameters for attestation

Custom notification processes

Set up customized processes to send more email notifications within an attestation case. You can use following events for generating processes.

Table 19: Events for the AttestationHelper object

Event

Triggered by

DecisionRequired

New attestation case created

Move to the next approval level

Remind

Reminder interval expired

Table 20: Events for the AttestationCase object

Event

Triggered by

Granted

Approval granted for an approval step.

Dismissed

Approval denied for an approval step.

OrderGranted

Approval granted for an entire approval procedure.

FinalDismissed

Approval denied for an entire approval procedure.

QueryToPerson

Making a query

AnswerFromPerson

Answering a query

RecallQuery

Recalling a query

Escalate

Attestation case escalated.

Aborted

Attestation case canceled.

Canceled

Obsolete attestation case canceled.

For more information about creating processes, see the One Identity Manager Configuration Guide.

Suspending attestation

To suspend attestation you have two options.

  1. Disable the schedule assigned to the attestation policy.

    As long as the schedule is disabled, no new attestation cases will be generated. This applies to all attestation policies that have this schedule assigned to them.

    For more information, see Attestation schedules.

  2. Disable the attestation policy

    Once an attestation policy is disabled, no new attestation cases are generated. In addition, all associated attestation cases are deleted. To avoid loosing the attestation history in the process, you can configure how data changes are logged.

    For more information, see Disabling attestation policies.

  3. Disable the policy collection.

    Once a policy collection is disabled, all associated attestation policies are disabled.

    For more information, see Disabling policy collections.

Related topics

Approval processes for attestation cases

All attestation procedures are subject to a defined approval process. During this approval process, authorized employees grant or deny approval for attestation objects. You can configure this approval process in various ways, and therefore customize it to meet your company policies.

You define approval policies and approval workflows for approval processes. Specify the approval workflows to apply to the attestation cases in the approval policies. Use approval workflows to find out, which employees in which order, can grant or deny attestation. An approval workflow can contain several approval levels and several approval steps. A special approval procedure is used to determine the attestors in each approval step.

Detailed information about this topic

Approval policies for attestations

One Identity Manager uses approval policies to determine the attestor for each attestation case.

To edit an approval policy

  1. In the Manager, select the Attestation > Basic configuration data > Approval policies category.

  2. Select an approval policy in the result list and run the Change main data task.

    - OR -

    Click in the result list.

  3. Edit the approval policy main data.

  4. Save the changes.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating