Chat now with support
Chat with Support

Identity Manager On Demand - Starling Edition Hosted - Identity Management Base Module Administration Guide

Basics for mapping company structures in One Identity Manager Dynamic roles Departments, cost centers, and locations
One Identity Manager users for managing departments, cost centers, and locations Basic information for departments, cost centers, and locations Creating and editing departments Creating and editing cost centers Creating and editing locations Setting up IT operating data for departments, cost centers, and locations Assigning identities, devices, and workdesks to departments, cost centers, and locations Assigning company resources to departments, cost centers, and locations Creating dynamic roles for departments, cost centers, and locations Dynamic roles with incorrectly excluded identities Assign organizations Specifying inheritance exclusion for departments, cost centers, and locations Assigning extended properties to departments, cost centers, and locations Certifying departments, cost centers, and locations Reports about departments, cost centers, and locations
Identity administration
One Identity Manager users for managing identities Basics for managing identities Creating and editing identities Assigning company resources to identities Displaying the origin of identities' roles and entitlements Analyzing role memberships and identity assignments Deactivating and deleting identities Deleting all personal data Limited access to One Identity Manager Changing the certification status of identities Displaying the identities overview Displaying and deleting identities' Webauthn security keys Determining the language for identities Determining identities working hours Manually assigning user accounts to identities Entering tickets for identities Assigning extended properties to identities Reports about identities Basic configuration data for identities
Managing devices and workdesks Managing resources Setting up extended properties Configuration parameters for managing departments, cost centers, and locations Configuration parameters for managing identities Configuration parameters for managing devices and workdesks

Changing the certification status of identities

NOTE: This function is only available if the Attestation Module is installed.

Identity's certification status is set by default through certification and recertification procedures. For more information, see the One Identity Manager Attestation Administration Guide.

You can manually change an identity's certification status if it is necessary to do so outside the regular recertification schedule.

Prerequisite

  • The QER | Attestation | UserApproval configuration parameter is set.

To change an identity's certification status manually

  1. To change the certification status of an active identity, in the Manager, select the Identities > Identities. category.

    - OR -

    To change the certification status of a permanently deactivated identity, in the Manager, select the Identities > Inactive identities category.

  2. Select the identity in the result list.

  3. Select the Change certification status task.

  4. Select the certification status you want from the Certification status menu.

  5. Click OK to accept the changes.

    The new certification status for the identity is displayed on the form.

    NOTE: The Permanently deactivated option is updated depending on the certification status. If an identity's certification status is set to Denied manually or as a result of attestation, the identity is immediately deactivated permanently. If the identity's certification status is changed to Certified, the identity is activated again.

Related topics

Displaying the identities overview

Use this task to obtain an overview of the most important information about an identity.

To obtain an overview of an identity

  1. In the Manager, select the Identities > Identities category.

  2. Select the identity in the result list.

  3. Select the Identity overview task.

    The most important information about an identity is shown on this form, including the identity's contact data, user accounts, and affiliation to company structures. The assigned company resources and access to IT Shop structures and IT Shop requests are displayed.

    The identity's responsibilities within the One Identity Manager are displayed on the form. This includes the application roles that an identity has been assigned within the One Identity Manager and the functions as department manager, cost center manager, or approver within the IT Shop.

  4. Select the Identity entitlements overview task.

    This form shows the system entitlements and all the target system groups allocated to an identity.

Displaying and deleting identities' Webauthn security keys

One Identity offers users the option to log in, simply and securely, to One Identity Manager web applications with help of (physical) security keys. These security keys support the W3C standard WebAuthn.

For more information about using security keys in the Web Portal, see the One Identity Manager Web Portal User Guide. For more about configuring this method, see the One Identity Manager Web Application Configuration Guide.

As identity administrator, you can view identities' security keys and delete them if necessary.

To display an identity's security key

  1. In the Manager, select the Identities > Identities category.

  2. Select the identity in the result list.

  3. Select the Show webauthn security keys task.

    This shows all the identity's security keys.

  4. Select one of the security keys in the list to show its details.

To delete an identity's security key

  1. In the Manager, select the Identities > Identities category.

  2. Select the identity in the result list.

  3. Select the Show webauthn security keys task.

  4. Select the security in the list and click Remove.

  5. Save the changes.

Determining the language for identities

In order for email notifications within the request process in the IT Shop or during attestation to be sent in the recipients language, the identity's language has to be determined.

  • States and countries and their languages already exist in the One Identity Manager default installation. Verify and edit this information in the Designer. For more information, see the One Identity Manager Configuration Guide.

  • Add the country and state of the primary location to the primary department, the primary cost center, the primary business role, or directly to the identity. To map special cases, you can also add the language directly to the location, department, cost center, or identity.

An identity’s language is determined in the following order:

  1. Language that is directly assigned to the identity.

  2. Language of the identity's state.

  3. Language of the identity's country.

  4. Language directly assigned to the identity's location.

  5. Language of the primary location's state.

  6. Language of the primary location's country.

  7. Language directly assigned to the identity's primary department.

  8. Language of the primary department's state.

  9. Language of the primary department's country.

  10. Language of the primary department's country.

  11. Language of the primary cost center's state.

  12. Language of the primary cost center's country.

  13. Language directly assigned to an identity's primary business role

  14. Language of the primary business role's state.

  15. Language of the primary business role's country.

  16. Fallback, in case the language could not be determined with this sequence:

    1. Language from the Common | MailNotification | DefaultCulture configuration parameter.

    2. Language en-US.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating