Chat now with support
Chat with Support

Identity Manager 8.0 - Attestation Administration Guide

Attestation and Recertification
One Identity Manager Users for Attestation Attestation Base Data Attestation Policies Creating Custom Mail Templates for Notifications
Approval Processes for Attestation Cases
Approval Policies Approval Workflows Selecting Attestors Setting up Multi-Factor Authentication for Attestation Prevent Attestation by Employee Awaiting Attestation Managing Attestation Cases
Attestation Sequence Default Attestation and Withdrawal of Entitlements User Attestation and Recertification Mitigating Controls Configuration Parameters for Attestation

Escalating an Attestation Case

Escalating an Attestation Case

Approval steps can be automatically escalated once the specified timeout is exceeded. The attestation case is presented to another approval body. The attestation case can subsequently be processed again in the normal workflow.

To configure escalation of an approval step

  1. Open the approval workflow in the Workflow Editor.
  2. Add an additional approval level with one approval step for escalation.
  3. Connect the approval step that is going to be escalated when the time period is exceeded with the new approval step. Use the connection point for escalation to do this.

    Figure 3: Example of an Approval Workflow with Escalation

  4. Configure the behavior for the approval step to be escalated when it times out.
    Table 37: Approval Step Properties for Abort on Timeout
    Property Meaning
    TimeOut (working hours)

    Number of working hours to elapse after which the approval step is automatically granted or denied approval.

    The approvers work time applies to the time calculation.

    NOTE: Ensure that a state and/or county is entered into the employee‘s master data for determining the correct working hours.
    Timeout behavior

    Action, which is executed if the timeout expires.

    Table 38: Possible Methods for Escalation on Timeout
    Method Description

    Escalation

    The attestation case is escalated. The escalation approval step is called.

Emails can be sent to the new attestors and other employees on escalation.

Related Topics

Attestors cannot be Established

Attestors cannot be Established

You can specify a fallback approver if attestation cases cannot be approved due to lack of attestor. An attestation case is always returned to the fallback approver for attestation if the approval step in a specified approval procedure, cannot determine an attestor.

To specify fallback approvers, define application roles and assign these to an approval step. Different attestation groups in the approval steps may require different fallback approvers. Specify different application role for this, to which you can assign employees who can be determined as fallback approvers in the approval process. For more information, see the One Identity Manager Application Roles Administration Guide.

To specify fallback approvers for an approval step

  1. Select the category Attestation | Basic configuration data | Approval workflows.
  2. Select a workflow in the result list. Select Change master data in the task view.
  3. Mark the approval step in the workflow editor.
  4. Select Toolbox | Approval levels | Add....
  5. Assign an application in Fallback approver or create a new application role.
  6. Save the changes.

Attestation sequence with fallback approvers

  1. An attestor cannot be established for an approval step in an approval process. The attestation is assigned to all members of the fallback approver application role.
  2. Once a fallback approver has made an approval decision, the attestation case is passed onto the attestation of the next approval level.

    pecify in the approval step, how many approversattestors must approve this approval step. This limit is not valid for the chief approval team. The approval step is considered approved the moment one fallback approver has approved the attestation.
  3. The attestation case is aborted if no fallback approver can be established.

Fallback approvers can approve attestors for all manual approval steps. The fallback approvals are not permitted for approval steps with the approval procedures CD, EX and WC .

Related Topics

Automatic Approval on Timeout

Automatic Approval on Timeout

Attestation instances can be automatically approved once a specified time period has been exceeded.

To configure automatic approval if the timeout expires

  • Enter the following data for the approval step.
    Table 39: Properties for Automatic Approval on Timeout
    Property Meaning

    TimeOut (working hours)

    Number of working hours to elapse after which the approval step is automatically granted or denied approval.

    The approvers work time applies to the time calculation.

    NOTE: Ensure that a state and/or county is entered into the employee‘s master data for determining the correct working hours.

    Timeout behavior

    Action, which is executed if the timeout expires.

    Table 40: Possible Methods for Escalation on Timeout
    Method Description

    Approval

    The attestation case is granted approval in this approval step. The next approval step is called.

    Deny

    The attestation case is denied approval in this approval step. The next approval step is called.

When the approval decision for an attestation case is made automatically, other people can be notified by email.

Related Topics

Aborting an Attestation Case on Timeout

Aborting an Attestation Case on Timeout

Attestation instances can be automatically aborted once a specified time period has been exceeded. The abort takes place when either a single approval step or the entire approval process has exceeded the timeout.

To configure an abort after the timeout of a single approval step has been exceeded

  • Enter the following data for the approval step.
    Table 41: Approval Step Properties for Abort on Timeout
    Property Meaning

    TimeOut (working hours)

    Number of working hours to elapse after which the approval step is automatically granted or denied approval.

    The approvers work time applies to the time calculation.

    NOTE: Ensure that a state and/or county is entered into the employee‘s master data for determining the correct working hours.
    Timeout behavior

    Action, which is executed if the timeout expires.

    Table 42: Method for Abort on Timeout
    Method Description

    Abort

    The approval, and therefore the entire attestation procedure, is aborted.

To configure abort on timeout for the entire approval process

  • Enter the following data for the approval workflow.
    Table 43: Approval Step Properties for Abort on Timeout
    Property Meaning

    System abort (days)

    Number of days to elapse after which the approval workflow, and therefore the system automatically ends the entire attestation procedure.

When an attestation case is aborted, other people can be notified by email.

Related Topics
Related Documents