Chat now with support
Chat with Support

Identity Manager 8.0 - Attestation Administration Guide

Attestation and Recertification
One Identity Manager Users for Attestation Attestation Base Data Attestation Policies Creating Custom Mail Templates for Notifications
Approval Processes for Attestation Cases
Approval Policies Approval Workflows Selecting Attestors Setting up Multi-Factor Authentication for Attestation Prevent Attestation by Employee Awaiting Attestation Managing Attestation Cases
Attestation Sequence Default Attestation and Withdrawal of Entitlements User Attestation and Recertification Mitigating Controls Configuration Parameters for Attestation

Reminding Attestors

Reminding Attestors

If an attestor has not made a decision by the time the reminder timeout expires, notification can be sent by email as a reminder. The attestors work time applies to the time calculation.

Prerequisite

  • The configuration parameter "QER\Attestation\MailTemplateIdents\RequestApproverByCollection" is not set.

To set up the notification procedure

  • Enter the following data for the approval step.
    Table 50: Approval Step Properties for Notification
    Property Meaning
    Reminder interval (hours)

    Number of working hours to elapse after which the attestor is notified by mail that there are still pending requests for attestation cases for attestation.

    NOTE: Ensure that a state and/or county is entered into the employee‘s master data for determining the correct working hours.
    Mail template reminder

    Select the mail template "Attestation - remind approver".

    TIP: If you permit approval by email, select the mail template "Attestation - remind approver (by mail)".

NOTE: You can schedule demands for attestation to send a general notification if there are attestations pending. This replaces single demands for attesation at each approval step.
Related Topics

Scheduling Attestation Demands

Scheduling Attestation Demands

Table 51: Configuration Parameter for Scheduled Notifications

Configuration parameter

Meaning

QER\Attestation\MailTemplateIdents\
RequestApproverByCollection

This mail template is used for generating an email when there are pending attestation for an approver. If this configuration parameter is not set, a "Mail template demand" or "Mail template reminder" for single attestation cases can be entered to send an email for each request. If this configuration parameter is set, single mails are not sent.

Attestors can be regularly notified of attestation cases that are pending. Regular notifications replace single demands and attestation reminders, configured in the approval step.

To send notifications about pending attestations on a regular basis

  1. Set the configuration parameter "QER\Attestation\MailTemplateIdents\RequestApproverByCollection" in the Designer.

    Notification with the mail template "Attestation - pending attestations for approver" is sent by default.

    TIP: To use something other than the default mail template for these notifications, change the value of the configuration parameter.
  2. Configure and enable the schedule "Inform approver about pending attestations" in the Designer.

    For more detailed information, see the One Identity Manager Configuration Guide.

Reminding Attestors about an Attestation Object

Reminding Attestors about an Attestation Object

Table 52: Configuration Parameter for Notifying Attestors about a Specific Attestation Object

Configuration Parameter

Meaning

QER\Attestation\MailTemplateIdents\
RemindApproverByObject

This mail template is used for sending an email to an attestor who still has pending attestations for a specific attestation object.

The hierarchical role manager and those responsible for system entitlements or system roles can view all pending attestation cases for this object in the Web Portal. If necessary, they can send reminders to attestors of selected attestation objects.

To send notification about a specific attestation object

  • Set the configuration parameter "QER\Attestation\MailTemplateIdents\RemindApproverByObject" in the Designer.

    By default, notification is sent using the template "Attestation - remind approver of all open object attestations".

TIP: To use something other than the default mail template for these notifications, change the value of the configuration parameter.

To send notifications user the Web Portal. For more detailed information, see the One Identity Manager Web Portal User Guide.

Granting or Denying an Attestation Case

Granting or Denying an Attestation Case

When a attestation case is granted approval or denied it, other employees receive notification. Notification may occur after approval or denial of a single approval step or once the entire approval process is complete. You can specify the recipient of the notification as required by the company.

Attestation cases can be automatically granted or denied approval once a specified time period has been exceeded. Notification is sent in the same way in this case.

To set up the notification procedure

  1. Create custom mail templates for sending notification if attestation cases have been granted or denied approval.
  2. Create company specific processes for notifications.
  3. Enter the following data in the approval step when notification should immediately follow the approval decision of a single approval step:
    Table 53: Approval Step Properties for Notification
    Property Meaning
    Mail template approval Mail template for sending notification if an approval step is granted approval.
    Mail template denied Mail template for sending notification if an approval step is denied approval.

    - OR -

    Enter the following data in the approval policy when notification should immediately follow completion of the approval procedure.

    Table 54: Approval Policy Properties for Notification
    Property Meaning
    Mail template approval Mail template for sending notification if an attestation case is granted approval.
    Mail template denied Mail template for sending notification if an attestation case is denied approval.
Detailed information about this topic
Related Documents