Identity Manager 8.0 - Web Portal User Guide

Requesting Products requiring Multi-Factor Authentication

Some products in the Web Portal can only be requested using multi-factor authentication. To use multi-factor authentication, you must have a Starling 2FA token. For more information, see Requesting a Starling 2FA Token.

Similarly, certain settings must be enabled on the service item and the attestation policy in the IT Shop. You have different setting combination options here. For example, multi-factor authentication requires input of a security code by you or our manager. In the following step-by-step, multi-factor authentication is described on the basis of a combination of confirming terms of use and entering your security code as requester.

To request a product requiring multi-factor authentication

1. Open the menu Request | My Requests and click Start a new request.
2. Select a product from a service category that requires multi-factor authentication.

    

3. Check the request in your shopping cart and click Submit.
4. Confirm the prompt with Yes.
5. Enable the option I have read and understood the terms of use in the Terms of Use view and click Accept.

   It may take some minutes before you are prompted to enter a security code.

6. Follow the instructions in the dialog box.
   1. Click Send SMS.

      - OR -

   2. Click Phone call.

      - OR -

   NOTE: If the Starling 2FA app is already installed on your mobile phone, you can use it to generate a security code.

   3. Enter the security code in the dialog box and click Next.

Special Requests

Certain actions trigger a request when executed in the Web Portal and add it to the cart. The following actions cannot be executed from the Request menu.

• Adding Entitlements
• Requesting and Deleting Memberships to Organizations, Business Roles or System Roles, System Entitlements and Other Services
• Deleting Memberships
• Master Data

Requesting Groups

The service category "Active Directory Groups", represents another special role in the request process using a service category. During the request process, the group requester must enter the data for the group.

To make a request in the service category "Active Directory Groups"

1. Open the Request menu.
2. Click the service category "Active Directory Groups".
3. Enable the selected product in the list of displayed Active Directory groups.

   More information is displayed about the selected product in the detailed content view.

4. Perform one of the following tasks.
   1. Click Request if you want to add more products to your cart.
   2. Click Submit request now.
5. Enter a group name in the dialog window and click OK.

   The information about the group should contain hints about the naming, type of group and target container. The approver adds the group based on this information. You get more information about the product when you click on the product name.

Submitting Requests

After you have added your requests to the shopping cart, edited and checked them, you can submit your shopping cart.

To submit your requests

1. Open the Shopping Cart menu.
2. Ensure you only have requests that you really want to submit in your cart.

   NOTE: If this combination of requests is one you might make again, you can create a template. For more information, see Maintaining Templates.

3. Mark the request you want and enter more data in the detailed content view.

   NOTE: The request must have been checked and status set to OK.

4. If you want to enter an additional comment about the shopping cart, click Edit.
5. Enter a comment about the shopping cart and click Save.

   NOTE: you can test the request for a rule violation by selecting Check only in the Actions menu. If a rule violation is found, the request is still being processed and requires further approval from managers.

6. Click Submit.
7. Confirm the prompt with Yes.

   NOTE: You may be required to confirm the terms of use for some shopping cart items. The terms of use are displayed after you have confirmed the prompt with Yes. Read the terms of use and set the option I have read and understood the terms of use. You will also be prompted to enter your user name and password. Close the terms of use view and click Accept. For more detailed information about default reasons, see the One Identity Manager IT Shop Administration Guide.

   The information The request was successfully submitted appears in My Shopping Cart.