Chat now with support
Chat with Support

Identity Manager 8.0 - Attestation Administration Guide

Attestation and Recertification
One Identity Manager Users for Attestation Attestation Base Data Attestation Policies Creating Custom Mail Templates for Notifications
Approval Processes for Attestation Cases
Approval Policies Approval Workflows Selecting Attestors Setting up Multi-Factor Authentication for Attestation Prevent Attestation by Employee Awaiting Attestation Managing Attestation Cases
Attestation Sequence Default Attestation and Withdrawal of Entitlements User Attestation and Recertification Mitigating Controls Configuration Parameters for Attestation

Default Attestation Policies

Default Attestation Policies

The One Identity Manager provides default attestation policies for default attestation of new users and recertification of all employees stored in the One Identity Manager database. In addition to this, default attestation policies are provided through which various roles, memberships in roles and system entitlements can be attested.

To display default attestation policies

  • Select the category Attestation | Attestation policies | Prefined.

You can customize the following properties for default attestation policies:

  • Approval policies (if several approval policies can be assigned)
  • Owner
  • Processing time
  • Risk index
  • Calculation schedule
  • Disabled
  • Close obsolete tasks automatically
  • Obsolete tasks limit
  • Reason for decision

TIP: If you want to limit the number of attestation objects for default attestation polices, create a copy of the default attestation policy. You can edit the condition in the copy.

NOTE: You can edit attestation policies, whose condition is stored as a definition (XML), in the Web Portal. The definition (XML) cannot be edited in the Manager. For more detailed information, see the .One Identity Manager Web Portal User Guide

Additional Tasks for Attestation Policies

After you have entered the master data, you can apply different tasks to it. The task view contains different forms with which you can run the following tasks.

The Attestation Policy Overview

The Attestation Policy Overview

You can see the most important information about an attestation policy on the overview form.

To obtain an overview of an attestation policy

  1. Select the category Attestation | Attestation policies.
  2. Select the attestation policy in the result list.
  3. Select Attestation policy overview in the task view.

Assigning Approvers

Assigning Approvers

Use this task to assign employees that can be determined as approvers in an attestation case to the selected attestation policy.

To assign approvers to an attestation policy

  1. Select the category Attestation | Attestation policies.
  2. Select the attestation policy in the result list.
  3. Select Assign approvers from the task list.
  4. Double-click on an approver in Add assignments to assign it.

    – OR –

    Double-click on an approver in Remove assignments to remove the approver.

  5. Save the changes.
Detailed information about this topic
Related Documents