Chat now with support
Chat with Support

We are currently experiencing a OneLogin Outage within the US region, please consult https://www.onelogin.com/status for further details.

Identity Manager On Demand Hosted - Attestation Administration Guide

Attestation and recertification
One Identity Manager users for attestation Attestation base data Attestation policies Sample attestation Custom mail templates for notifications Suspending attestation
Approval processes for attestation cases
Approval policies for attestations Approval workflow for attestations Selecting attestors Setting up multi-factor authentication for attestation Prevent attestation by employee awaiting attestation Attestation by peer group analysis Managing attestation cases
Attestation sequence Default attestation and withdrawal of entitlements User attestation and recertification Mitigating controls Setting up attestation in a separate database Configuration parameters for attestation

Assigning approvers to attestation policies

Use this task to assign employees that can be determined as approvers in an attestation case to the selected attestation policy.

To assign approvers to an attestation policy

  1. In the Manager, select the Attestation > Attestation policies category.

  2. Select the attestation policy in the result list.

  3. Select the Assign approver task.

    In the Add assignments pane, assign the approvers.

    TIP: In the Remove assignments pane, you can remove approver assignments.

    To remove an assignment

    • Select the approver and double-click .

  4. Save the changes.
Detailed information about this topic

Assigning compliance frameworks to attestation policies

Use this task to specify which compliance frameworks are relevant for the selected attestation policy. Compliance frameworks are used for classifying attestation policies, compliance rules, and company policies according to regulatory requirements.

To assign compliance frameworks to an attestation policy

  1. In the Manager, select the Attestation > Attestation policies category.

  2. Select the attestation policy in the result list.

  3. Select the Assign compliance frameworks task.

    In the Add assignments pane, assign the compliance frameworks.

    TIP: In the Remove assignments pane, you can remove compliance framework assignments.

    To remove an assignment

    • Select the compliance framework and double-click .

  4. Save the changes.

Mitigating controls

Mitigating controls describe controls that are implemented if an attestation rule was violated. The attestation can be approved after the next attestation run, once controls have been applied.

To edit mitigating controls

  • In the Designer, enable the QER | CalculateRiskIndex configuration parameter.

    NOTE: If you disable the configuration parameter at a later date, model components and scripts that are not longer required, are disabled. SQL procedures and triggers are still carried out. For more information about the behavior of preprocessor relevant configuration parameters and conditional compiling, see the One Identity Manager Configuration Guide.

Detailed information about this topic

Assigning mitigating controls

Specify which mitigating controls apply to the selected attestation policy.

To assign mitigating controls to an attestation policy

  1. In the Manager, select the Attestation > Attestation policies category.

  2. Select the attestation policy in the result list.

  3. Select the Assign mitigating controls task.

    In the Add assignments pane, assign the mitigating controls.

    TIP: In the Remove assignments pane, you can remove mitigating control assignments.

    To remove an assignment

    • Select the mitigating control and double-click .

  4. Save the changes.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating