One Identity Manager Software Architecture
Working with Objects in One Identity Manager
Inserting, Modifying and Deleting Objects in One Identity Manager
Working with the Designer
General Information about the Program
Menu Items
Views in the Designer
Customizing Program Settings
Using Help
Limiting List Sizes
Searching for List Entries
Using the Designer's Own Full-Text Search
Using User Defined Filters for Searching
Making and Committing Changes to Objects
The Designer Editors
Working with the Object Editor
Working with the List Editor
Customizing the One Identity Manager Default Configuration
Checking Data Consistency
Menu Items
Functions in the Result List
Result List Configuration
Multiple Editing of List entries
Displaying Object Relations
Working with the SQL Editor
Support for Scripting
Working with the Consistency Editor
Starting the Consistency Check
Recording Test Results
Repairing Errors
Compiling a One Identity Manager Database
Working with Change Labels
Creating Change Labels
Displaying Contents of a Change Label
Booking Changes to a Change Label Retrospectively
Basic System Configuration Data
One Identity Manager Authentication Module
Database Connection Data
The One Identity Manager Data Model
Database Connection Properties
Configuring a One Identity Manager Database for Testing, Development or Production
Configuration Parameters for System Configuration
Setting up the Mail Notification System
Enabling More Languages for Displaying and Maintaining Data
Displaying Country Information
Working in Different Time Zones
Determining Working Hours
Editing Countries
Editing States
Modifying Public Holidays
Setting Up and Configuring Schedules
Password Policies in One Identity Manager
Predefined Password Policies
Editing Password Policies
Custom Scripts for Password Requirements
Restricted Passwords
Testing a Password
Testing Generating a Password
Assigning a Password Policy
Reloading Changes Dynamically
TimeTrace Databases
Machine Roles and Server Functions
Files for Software Update
Importing New Files into a One Identity Manager Database
Exporting Files from a One Identity Manager Database
Configuring Files
Operating Systems in Use
System Configuration Reports
Using Predefined Database Queries
Managing Custom Database Objects within a Database
Basics of the Data Model
General Advice for Editing Table and Column Definitions
Working with the Schema Editor
Mapping Table Definitions
Granting One Identity Manager Schema Permissions
Table Properties
Working with Module Globally Unique Modifiers
Table scripts
Database Views of Type "View"
Database Views of Type "Union"
Database Views of Type "Proxy"
Database Views of Type "Read-only"
Mapping Column Definitions
Column Properties
Templates
Mapping Table Relations
Supporting File Groups
Editing Value Templates
Example of Local Value Templates within an Object
Example of Value Templates across Objects
Formats for Checking Values
Permitted Column Values
Mapping Dynamic Foreign Keys
Column Dependencies for Setting Values
Configuring Columns for Full-Text Search
Predefined Permissions Groups and System Users
Editing Permissions Groups and System Users
Working with the User Interface
Working with the User & Permissions Group Editor
Permissions Group Dependencies
Copying Permissions Groups
Manually Creating Permissions Groups
Permissions Groups Properties
Editing System Users
Adding a System User to Permissions Groups
Dynamic system user
Which Employees Use System Users?
Editing Permissions for One Identity Manager Schema Tables and Columns
Rules for Finding Valid Permissions for Tables and Columns
Working with the Permissions Editor
Availability of Certain Functionality
Displaying Permissions for an Object
Displaying the Current User's Permissions
Menu Items
Views in the Permissions Editor
Functions in the Permissions Edit View
Filtering Entries in the Permissions Editor
Granting Permissions for Tables
Granting Column Permissions
Object definitions for the User Interface
Process Orchestration in One Identity Manager
Selection Criteria for Object Definitions
Using Display Text for Object Definitions
Working with Object Definitions
User Interface Navigation
Navigation View Elements
Recommendations for Editing Menu Navigation
Working with the User Interface Editor
Editing Menu Items
General Menu Item Properties
Creating Database Queries for Data Dependent Menu Items
Editing Lists
Using Links
Using Variables
Forms for the User Interface
Recommendations for Editing Forms
Working with the Form Editor
Editing Interface Forms
Statistics in the One Identity Manager
User Interface Form Properties
Form Definitions and Form Templates
Effects of Object Definitions when Displaying Interface Forms
Features of the Assignment Form
Forms for Custom Extensions
Custom Master Data Forms
Configuration Data for Displaying Many-to-Many and Object Relations on Forms
Replacing Default Forms with Custom Forms
Working with Overview Forms
Working with Statistic Definitions
Linking Statistics into the User Interface
Diagram Types for Visualizing Statistics
Examples of Statistic Definitions
Extending the Launchpad
Task Definitions for the User Interface
Applications for Configuring the User Interface
Icons and Images for Configuring the User Interface
Language Dependent Data Representation
Declaring the Job Server
Tracking Changes with Process Monitoring
Working with the Job Server Editor
Editing a Job Server
One Identity Manager Service Configuration
Job Server Properties
Server Functions of a Job Server
Job Server Machine Roles
Job Server Statistic Information
Installing the One Identity Manager Service on the Job Server
Customizing the One Identity Manager Service Configuration for a Job Server
One Identity Manager Service Configuration Files
Process Collection Module
Handling Processes in the One Identity Manager
MSSQLJobProvider
OracleJobProvider
FileJobProvider
FTPJobProvider
HTTPJobProvider
AppServerJobProvider
The Jobdestination Module
The Configuration Module
The Logwriter Module
The Dispatcher Module
The Connection Module
The HTTP Authentication Module
The Plug-ins Module
HTTPLogPlugin
ScheduleCommandPlugin
DBSchedulerWatchDogPlugin
RequestWatchDogPlugin
PerformanceCounterPlugin
DebugMailPlugin
ShareInfoPlugin
RemoteConnectPlugin
Module File with Private Key
Working with the Process Editor
Defining Processes
Creating and Editing Processes
Executing Processes Automatically
Process Components
Properties for a Process
Using Process Specific and Global Variables for the Process Definition
Thresholds for Handling Processes
Creating and Editing Events
Creating and Editing Process Steps
Process Step Parameters
Searching for a Process Step within a Process
Comparing Processes
Exporting and Importing Processes
Simulating Process Generation
Checking the Validity of a Process
Compiling a Process
Basics for Process Monitoring
Logging Data Changes
Logging Process Information during Process Handling
Recording Messages in the Process History
Process Tracking for DBQueue Processor Operations
Archiving and Deleting Recordings
Conditional Compilation using Preprocessor Conditions
Preprocessor Relevant Configuration Parameters
Preprocessor Conditions in Objects
Preprocessor Conditions in VB.Net Expressions
Evaluation of Preprocessor Conditions during Compilation
One Identity Manager Scripts
Using Scripts
Message Output
Implementing Dates
Using Dollar ($) Notation
Maintaining Mail Templates
Reports in the One Identity Manager
Accessing Local Object Columns
Accessing Object Columns Connected by a Relation
Accessing the Old Column Value
Accessing Column Display Values
Accessing References in Comments
Accessing Local Object Meta Values
Using base. Object
Calling Functions
Pre-scripts for using in Processes and Process Steps
Using Session Services
Querying Configuration Parameters
Testing the Existence of Certain Database Entries
Querying Session Object Global Variables
Using #LD Notation
Scripts in the Script Library
Working with the Script Editor
Editing Scripts
Overriding Scripts
Testing Script Compilation
Testing a Script with the Script Editor
Testing Scripts with the System Debugger
Working with the Report Editor
Creating and Editing Reports
Custom schema extensions
General Report Properties
Creating a Data Source
Example of a Simple Report with Data Grouping
Translating Reports
Linking Reports into the User Interfaces
Data Retrieval using an SQL Query
Data Retrieval using a Database View
Data Retrieval using an Object
Data Retrieval using Single Object History
Data Retrieval using Multiple Object History
Data Retrieval using Historical Assignments
Data Query for Simulation Data
Editing Report Parameters
Using Virtual Data Sources
Editing the Report Form
Creating a New Table
Extending a Table
Defining Columns
Transporting One Identity Manager Schema Customizations
Creating a Simple Column
Creating a Foreign Key Column
Creating New Columns for Database Views
Configuring Column Properties
Creating a Read-Only Database View
Creating a Union View
Creating New Assignments Tables
Creating Indexes
Permissions for Schema Extensions
Specifying Change Labels for Schema Extensions
Adding Schema Extensions
Adding in Custom Extensions to the User Interface
Basics for Transport of One Identity Manager Schema Modifications
Creating a Transport Package with the Database Transporter
Importing Data
Transporting SQL Statements
Transporting Favorite Objects
Transport by Change Label
Transport by Change Information
Transporting Schema Extensions
Transporting Selected Objects and their Dependencies
Transporting System Configuration
Transporting System Files
Displaying Contents of a Transport Package
Importing a Transport Package with the Database Transporter
Displaying Transport History
Importing Data from CSV Files
Importing Data from a Database
Import Configuration
Web Service Integration
Assigning Target Tables and Columns
Assigning Target Columns with the Assignment Wizard
Specifying the Hierarchy
Options for Handling Records
Specifying Connection Variables
Importing Data
Using Import Definition Files
Binding a Web Service
SOAP Web Service
Generic Web Service Call
Direct Web Service Call
Self-Defined Web Service Call
Creating a Web Service Solution with the Web Service Integration Wizard
Changing a Web Service Solution
Deleting a Web Service Solution
Installing and Configuring the SOAP Web Service
One Identity Manager as SPML Provisioning Service Provider
Installing the SOAP Web Service
Configuring the SOAP Web Service
Displaying the Status of a SOAP Web Service
Uninstalling the SOAP Web Service
Examples of Calls
SPML Web Service
Installing and Configuring SPML Web Services
Configuring the One Identity Manager Schema
Testing SPML Web Service Functionality
Searching for Errors in the One Identity Manager
Monitoring Process Handling with Job Queue Info
Processing DBQueue Tasks
Working with Job Queue Info
Job Queue Info Views
Monitoring Process Execution
Error Messaging in the Error Message Window
Displaying Messages in the Error Log View
Logging Messages in the Database Journal
Writing the One Identity Manager Log
One Identity Manager Service Logging
Displaying Details of Process Handling
Displaying Details of Process Step Handling
Displaying Details of a Process Step Parameter
Reinstating Process Steps and Processes
Enabling Extended Logging of Process Steps
Determining the State of the Server
Displaying Entries in the DBQueue
Displaying Messages in the Database Journal
Displaying the Job Queue Sequence
Stopping the System (Emergency Stop)
Configuring the One Identity Manager Service Log File
Advanced Logging in the One Identity Manager Service
Displaying the One Identity Manager Service Log File
Extended Debugging in the One Identity Manager Service
Output of Extended Return Values from Individual Process Components
Outputting Custom Messages in the One Identity Manager Service Log File
Logging Messages in the Event View
HTTPLogPlugins Log File
Displaying One Identity Manager Application Server Status
Configuring the DBQueue Processor for Test and Development
Initializing the DBQueue Processor
Controlling Processing of DBQueue Processor Tasks
Processing DBQueue Processor Tasks
Reactivating DBQueue Processor Tasks
Bulk Processing in DBQueue Processor
How the Central Dispatcher Communicates with Individual Slots
Scheduled Maintenance Tasks
One Identity Manager Configuration Files
Working in Different Time Zones
Time stamps, for example, insert dates or modification dates, are stored in the One Identity Manager with the respective UTC. The object layer transforms this time data into the currently valid time zone data when an object is loaded. The user, therefore, sees all the values in local time. When an object is saved the current time zone data is transformed into UTC data.
Countries and time zones are linked to another in the One Identity Manager schema. This makes it easier to find out the time zones when web fronts such as Web Portal are in use. This has to be done at start up when all countries have to enabled that have an active web front.
Related Topics
Determining Working Hours
Working hours are calculated for various function in One Identity Manager. For example, to determine working hours in the IT Shop or for determining reaction and solution times for calls in the Helpdesk Module.
In order to determined the correct working hours, ensure that a state in entered in the employee's master data. Weekends and public holidays are taken into account when calculating working hours. Public holiday are entered by state (county) in the One Identity Manager. You can add separate public holidays for states.
The settings of the following configuration parameters are also taken into when calculating working hours:
- QBM\WorkingHours\IgnoreHoliday
If this configuration parameter is set, public holidays are not included in the calculation of working hours.
- QBM\WorkingHours\IgnoreWeekend
If this configuration parameter is set, weekends are not included in the calculation of working hours.
Related Topics
Editing Countries
The countries are loaded into the database during the schema installation and do not normally have to be customized.
|
|
NOTE: A new submenu item with the country name is shown for enabled countries in the category Base Data | Localization | Country in the Designer. Disabled countries are displayed under Disabled | <country name>. |
To edit a country
- Select the category Base Data | Localization | Country in the Designer.
- Select a country.
- Edit the master data.
To assign a culture to a country
- Select View | Select table relations... in the menu and enable the table DialogCountryHasCulture.
The Culture tab is displayed in the edit view.
To assign time zones to a country
- Select View | Select table relations... in the menu and enable the table DialogCountryHasTimeZone.
The Time zones tab is displayed in the edit view.
To assign public holidays to a country
- Select View | Select table relations... in the menu and enable the table DialogCountryHoliday.
The Holidays tab is displayed in the edit view.
To assign states to a country
- Select View | Select table relations... in the menu and enable the table DialogState.
The States tab is displayed in the edit view.
| Property | Description |
|---|---|
| Country name | Name of the country. |
| Description | Description of the country. |
| Enabled |
If this option is set, this country is can be selected from the list in the administration tools. This helps to limit the selection of time zones and cultures. |
| Daylight saving time | This option specifies whether daylight saving time is taken into account when the difference to UTC time is calculated. |
| Hours (default) | Specify the working hours which apply across the country. Working hours are taken into account when calculating time periods, for example in the IT Shop. Default is Monday to Friday, 9am until 5pm respectively. |
| Country name (national language) | Name of the country in the national language using the national script. |
| Capital city (national language) | Name of the capital city in the national language using the national script. |
| Country code | International telephone code for the country. |
| International vehicle reg. ID | International identifier for vehicle license plates. |
| ISO code (2-letter) | Two letter country code for this country. This data has to comply with ISO 3166, a standard for coding geographical units. |
| ISO code (3-letter) | Three letter country code for this country. This data has to comply with ISO 3166, a standard for coding geographical units. |
| ISO code (numeric) | Numeric country code for this country. This data has to comply with ISO 3166, a standard for coding geographical units. |
| Object class | Object class for mapping country data in an LDAP schema. |
| Search mask | Search mask for mapping country data in an LDAP schema. |
| UTC Offset (average) | Average time difference between country and UTC time. This value is calculated by the DBQueue Processor based on the country‘s time zones. |
| Cultures |
Language and language code of the country. The language specifies the language for email notification sent to users. |
| Time zones |
The country's time zone. The calculation of processes that are time dependent, such as in the IT Shop, is taken in account by specifying a time zone. |
| Holidays |
National holidays. National holidays are displayed in the category Base Data | Localization | Country | <country name> | Public holidays. |
| States | States within this country. States are displayed in the category Base Data | Localization | Country | <country name> | States. |
Related Topics
Editing States
The states are loaded into the database during the schema installation and do not normally have to be customized.
To edit a state
- Select the category Base Data | Localization | Country | <country name> | States | <state name> in the Designer.
- Select a state.
- Edit the master data.
To assign a culture to a state
- Select View | Select table relations... in the menu and enable the table DialogStateHasCulture.
The Culture tab is displayed in the edit view.
To assign time zones to a state
- Select View | Select table relations... in the menu and enable the table DialogStateHasTimeZone.
The Time zones tab is displayed in the edit view.
To assign public holidays to a state
- Select View | Select table relations... in the menu and enable the table DialogStateHoliday.
The Holidays tab is displayed in the edit view.
| Property | Description |
|---|---|
| State | Name of the state. |
| State name (national language) | Name of the state in the national language using the national script. |
| Country | Enter the country that the state belongs to. |
| Enabled | Use this option to mark the states that your system uses. |
| Daylight saving time | Specifies whether daylight saving time is taken into account when the difference to UTC time is calculated. |
| Hours (default) | Specify the working hours which apply across the state. Working hours are taken into account when calculating time periods, for example in the IT Shop. Default is Monday to Friday, 9am until 5pm respectively. |
| Capital city | Name of the state's capital. |
| Capital city (national language) | Name of the capital city in the national language using the national script. |
| Short name | Abbreviation for the state according to ISO 3166-2 standard, for example "CA" for California or "SN" for Saxony. |
| UTC Offset (average) | Average time difference between country and UTC time. This value is calculated by the DBQueue Processor based on the state‘s time zones. |
| Language culture |
Language and language code of the country. The language specifies the language for email notification sent to users. |
| Time zones |
The country's time zone. The calculation of processes that are time dependent, such as in the IT Shop, is taken in account by specifying a time zone. |
| Holidays | National holidays. State holidays are displayed in the category Base Data | Localization | Country | <country name> | States | <state name> | Public holidays. |