Moving products to another shelf
A product can be moved to another shelf. If the shelf is in another shop, the system checks whether the request recipient is also a customer in the new shop.
NOTE: Standard products cannot be moved.
To move a product to another shelf
-
In the Manager, select the IT Shop > IT Shop > <shop> > Shelf: <shelf> or the IT Shop > IT Shop > <shopping center> > <shop> > Shelf: <shelf> category.
-
Select an object in the result list.
-
Select the Move to another shelf task.
-
Select the new shelf.
- Click OK.
To move multiple products to another shelf
-
In the Manager, select the IT Shop > IT Shop > <shop> category or the IT Shop > IT Shop > <shopping center> > <shop> category.
-
Select the shelf in the result list.
-
Select the Move products to another shelf task.
-
Select the shelf to move the products to.
-
Select which products to move.
- Click OK.
Detailed information about this topic
Replacing products
A product can be replaced by another product at a specified time. All identities who have requested this product are notified by an email telling them to request a replacement product.
To replace a product with another one
-
In the Manager, select the IT Shop > Service catalog > Hierarchical by service categories > <service category> category.
- OR -
In the Manager, select the IT Shop > Service catalog > Hierarchical by service categories > Singles category.
-
Select the product's service item to replace in the result list.
-
Select the Change product task.
-
Enter the following data:
- Click OK.
Related topics
Preparing the IT Shop for multi-factor authentication
You can use multi-factor authentication for specific security-critical resource requests, which requires every approver for the request approval to authenticate themselves again. Define which products require this authentication in your service items.
One Identity Manager uses OneLogin for multi-factor authentication. Usable authentication modes are determined through the OneLogin user accounts linked to the identities.
Prerequisites
In OneLogin:
In One Identity Manager:
-
The OneLogin Module is installed.
-
Synchronization with a OneLogin domain is set up and has been run at least once.
-
Identities linked to OneLogin user accounts.
-
The API Server and the web application are configured as required.
For more information about setting up multi-factor authentication, see the One Identity Manager Authorization and Authentication Guide.
To use multi-factor authentication in the IT Shop
Once the Approval by multi-factor authentication option is enabled on a service item, additional authentication is requested in each approval step of the approval process. Approvers can select any one of the authentication methods assigned to their OneLogin user accounts.
IMPORTANT: An approval cannot be sent by email if multi-factor authentication is configured for the requested product. Approval mails for such requests produce an error message.
For more information about requesting products requiring multi-factor authentication and about canceling products, see the One Identity Manager Web Portal User Guide.
Related topics
Assignment requests
You can also use One Identity Manager to request hierarchical roles, like departments, or business roles, through the IT Shop and assign them to identities, devices, and workdesks. This allows any number of assignments to be made through IT Shop requests. The advantage of this method is that any assignments can be authorized using an approval process. Assignment renewals and assignment recall are also subject to an approval process in the same way. The request history makes it possible to follow which assignments were requested, renewed, or canceled, why, when, and by whom.
The managers of business roles, organizations, and system roles can make assignments requests for their roles.
In the Web Portal, managers of business roles, organizations, and system roles can see assignments requests for roles under their supervision. Use the QER | ITShop | ShowClosedAssignmentOrders configuration parameter to specify whether all assignment requests are displayed or only open ones. By default, pending as well as closed assignment requests are displayed.
To only display a manager's pending assignment requests in the Web Portal