Chat now with support
Chat with Support

Identity Manager 8.0 - Attestation Administration Guide

Attestation and Recertification
One Identity Manager Users for Attestation Attestation Base Data Attestation Policies Creating Custom Mail Templates for Notifications
Approval Processes for Attestation Cases
Approval Policies Approval Workflows Selecting Attestors Setting up Multi-Factor Authentication for Attestation Prevent Attestation by Employee Awaiting Attestation Managing Attestation Cases
Attestation Sequence Default Attestation and Withdrawal of Entitlements User Attestation and Recertification Mitigating Controls Configuration Parameters for Attestation



Use schedules to automate attestation. These specify when and how often attestation cases are created. The One Identity Manager supplies several default schedules for attestation.

To edit schedules

  1. Select the category Attestation | Basic configuration data | Schedules.

    The result list shows exactly those schedules configured for the table AttestationPolicy.

  2. Select a schedule in the result list and run the task Change master data.

    – OR –

    Click in the result list toolbar.

  3. Edit the schedule’s master data.
  4. Save the changes.

Enter the following properties for a schedule.

Table 5: Schedule Properties
Property Meaning


Schedule ID. Translate the given text using the button.


Detailed description of the schedule. Translate the given text using the button.


Table whose data can be used by the schedule. Attestation schedules must reference the AttestationPolicy table.


Specifies whether the schedule is enabled or not.

NOTE: Only active schedules are executed.

Time zones

Unique identifier for the time zone that is used for executing the schedule. Select either "Universal Time Code" or one of the time zones.

NOTE: When you add a new schedule, the time zone is preset to that of the client from which you started the Manager.

Start (date)

The day on which the schedule should be run for the first time.

Validity period

Period within which the schedule is executed.

  • If the schedule will be run for an unlimited period, select the option Unlimited duration.
  • To set a validity period, select the option Limited duration and enter the day the schedule will be run for the last time in End (date).


Interval in which the task is executed. Valid interval types are "Every minute", "Hourly", "Daily", "Weekly", "Monthly" and "Yearly".

Specify the exact weekday for the interval type "Weekly". Specify the day of the month (1st - 31st) for the interval type "Monthly". Specify the day of the year (1 - 366) for the interval type "Yearly".

NOTE: Schedules that have the sub-interval "31" and interval type "monthly" are run on the "31st of the month". The task is, therefore, only run in months with 31 days. The same is true of the interval type "yearly" and the sub-interval "366".

Start time

Fixed start time for the interval types "daily", "weekly", "monthly" and "yearly". Enter the time in local format for the chosen time zone.

The start time for interval types "Every minute" and "Hourly" is calculated from the rate of occurrence and the interval type.

Repeat every

Rate of occurrence for executing the schedule within the selected time interval. Select at least one weekday for the interval type "Weekly".

Last planned run/Next planned run

Execution time calculated by the DBQueue Processor. They are recalculated each time a schedule is run. The time of the next run is calculated from the interval type, rate of occurrence and the start time.

Note: The One Identity Manager provides the start information in the time zone of the client where the program was started. Changes due to daylight saving are taken into account.

Default Schedules

Default Schedules

The One Identity Manager supplies the following attestation schedules by default:

Table 6: Default Attestation Schedules
Calculation schedule Description
Half-Yearly Default schedules for any attestation.
Weekly (Monday)


Default schedule for user recertification.

This schedule is disabled, by default. To run recertification, assign a custom schedule to the attestation policy and enable it.


Default schedules for any attestation.

This schedule is assigned to the attestation policy "Certification of new users" by default.

Related Topics

Additional Tasks for Schedules

After you have entered the master data, you can apply different tasks to it. The task view contains different forms with which you can run the following tasks.

The Schedule Overview

The Schedule Overview

You can see the most important information about a schedule on the overview form.

To obtain an overview of a schedule

  1. Select the category Attestation | Basic configuration data | Schedules.
  2. Select the schedule in the result list.
  3. Select Schedule overview in the task view.
Related Documents