Chat now with support
Chat with Support

Identity Manager 8.0 - Attestation Administration Guide

Attestation and Recertification
One Identity Manager Users for Attestation Attestation Base Data Attestation Policies Creating Custom Mail Templates for Notifications
Approval Processes for Attestation Cases
Approval Policies Approval Workflows Selecting Attestors Setting up Multi-Factor Authentication for Attestation Prevent Attestation by Employee Awaiting Attestation Managing Attestation Cases
Attestation Sequence Default Attestation and Withdrawal of Entitlements User Attestation and Recertification Mitigating Controls Configuration Parameters for Attestation

Deleting Attestation Policies

Deleting Attestation Policies

IMPORTANT: Do not delete attestation policies, for audit reasons.

Attestation policies can be removed from the One Identity Manager database under specific conditions. Ensure that the attestation policy is archived when deleted.

For more detailed information about data archiving, see the One Identity Manager Configuration Guide.

Prerequisites

  • The user is logged in to the Manager as the system user "viadmin".
  • The attestation policy is disabled.

To delete an attestation policy

  1. Select the category Attestation | Attestation policies | Disabled policies.
  2. Select the attestation policy in the result list. Select Change master data in the task view.
  3. Select Delete attestation policy in the task view.
  4. Confirm the security prompt with Yes.

    The attestation policy is deleted. All associated attestation cases, approval workflows and the attestation history are deleted.

Related Topics

Disabling Attestation Policies

Disabling Attestation Policies

Attestations are run when the schedule assigned to an attestation policy is enabled. You can disabled attestation policies to prevent attestation cases being created for individual attestation policies.

TIP: Numerous default attestation policies are supplied with the One Identity Manager. Check which of the default attestation policies are relevant for your data situation when you set up your database. Disable all unnecessary attestation policies.

To disable an attestation policy

  1. Select the category Attestation | Attestation policies.
  2. Select the attestation policy in the result list. Select Change master data in the task view.
  3. Set Disabled.
  4. Save the changes.

Creating Custom Mail Templates for Notifications

Creating Custom Mail Templates for Notifications

A mail template consists of general master data such as target format, important or mail notification confidentiality and one or more mail definitions. Mail text is defined in several languages in the mail template. This ensures that the language of the recipient is taken into account when the email is generated.

There is a One Identity Manager in the Mail Template Editor to simplify writing notifications. You can use the Mail Template Editor to create and edit mail text in WYSIWYG mode.

To edit mail templates

  1. Select the category Attestation | Basic configuration data | Mail templates.

    This shows all the mail templates that can be used for attestation cases in the result list.

  2. Select the mail template in the result list. Select Change master data in the task view.

    - OR -

    Click in the result list toolbar.

    This opens the mail template editor.

  3. Edit the mail template.
  4. Save the changes.

To copy a mail template

  1. Select the category Attestation | Basic configuration data | Mail templates.
  2. Select the mail template you want to copy from the result list. Select Change master data in the task view.
  3. Select Copy mail template... in the task view.
  4. Enter the name of the new mail template in Name of copy.
  5. Click OK.

To display a mail template preview

  1. Select the category Attestation | Basic configuration data | Mail templates.
  2. Select the template in the result list. Select Change master data in the task view.
  3. Select Preview... in the task view.
  4. Select the base object.
  5. Click OK.

To delete a mail template

  1. Select the category Attestation | Basic configuration data | Mail templates.
  2. Select the template in the result list.
  3. Click in the result list toolbar.
  4. Confirm the security prompt with Yes.

General Properties of a Mail Template

General Properties of a Mail Template

The following general properties are displayed for a mail template:

Table 13: Mail Template Properties
Property Meaning
Mail template Name of the mail template. This name will be used to display the mail templates in the administration tools and in the Web Portal. Translate the given text using the button.
Base object Mail template base object. A base object only needs to be entered if the mail definition properties of the base object are referenced.

Use the base object AttestationCase or AttestationHelper for notifications about attestation.

Report (parameter set) Report, made available through the mail template.
Description Mail template description. Translate the given text using the button.
Target format Format in which to generate email notification. Permitted values are:
Value Description
HTML The email notification is formatted in HTML format. HTML format can contain formatting.
TXT The email notification is formatted in text format. Text format cannot contain any formatting.
Design type Design in which to generate the email notification. Permitted values are:
Value Description
Mail template The generated email notification contains mail text corresponding to the mail definition.
Report The email notification is generated with the report contained under Report (parameter set) as mail body.
Mail template, report as attachment The generated email notification contains mail text corresponding to the mail definition. The report entered in the Report (parameter set) field is attached to the mail as PDF file.
Importance Importance for the email notification. Permitted values are "low", "normal" and "high".
Confidentiality Confidentiality for the email notification. Permitted values are "normal", "personal", "private" and "confidential".
Can unsubscribe Specifies whether the recipient can unsubscribe email notification. If this option is set, the emails can be unsubscribed through the Web Portal.
Disabled Specifies whether this mail template is disabled.
Mail definitions Unique name for the mail definition.
Language culture Language which applies to the mail template.
Subject Subject of the email message
Mail body Content of the email message.
Related Documents