Chat now with support
Chat with Support

We are currently experiencing issues on our phone support and are working diligently to restore services. For support, please sign in and create a case or email for assistance

Identity Manager 8.1.4 - Configuration Guide

About this guide One Identity Manager software architecture Customizing the One Identity Manager default configuration Customizing the One Identity Manager base configuration One Identity Manager schema basics Editing the user interface
Object definitions for the user interface User interface navigation Forms for the user interface Statistics in One Identity Manager Extending the Launchpad Task definitions for the user interface Applications for configuring the user interface Icons and images for configuring the user interface Using predefined database queries
Localization in One Identity Manager Process orchestration in One Identity Manager
Setting up Job servers Configuring the One Identity Manager Service Handling processes in One Identity Manager
Tracking changes with process monitoring Conditional compilation using preprocessor conditions Scripts in One Identity Manager
Using scripts Notes on message output Notes on using date values Using dollar ($) notation Using base objects Calling functions Pre-scripts for use in processes and process steps Using session services Using #LD-notation Script library Support for processing of scripts in Script Editor Creating and editing scripts in the Script Editor Copying scripts in the Script Editor Testing scripts in the Script Editor Testing script compilation in the Script Editor Overriding scripts Permissions for executing scripts Editing and testing script code with the System Debugger Extended debugging in the Object Browser
Reports in One Identity Manager Adding custom tables or columns to the One Identity Manager schema Web service integration SOAP Web Service One Identity Manager as SPML provisioning service provider Processing DBQueue tasks One Identity Manager Service configuration files

Forms for custom extensions

One Identity Manager provides an array of form templates and definitions in the default installation. These can be used for easily creating your own forms.

An other way to create custom forms is to make custom form archives available. Normally, default forms in One Identity Manager are replaced with self developed forms.

Table 42: Form templates and definitions for custom extensions
Form template

Form definition




For editing many-to-many relations with extended properties in the form of a table.


FrmCommonOneMember AndChildRelation

A custom form must be created on which the data to be configured is displayed.

Assigns many-to-many relations and object relations (parent/child relations) on one form. Two tabs for displaying the data are shown on the form.


A custom form must be created on which the data to be configured is displayed.

Mapping object relations (Parent/ChildRelation).

If several additional object relations are mapped on a form, the FrmCommonTwoChildRelation and FrmCommonThreeChildRelation form templates can be used as alternatives. One tab is shown per object relation.


A custom form must be created on which the data to be configured is displayed.

Displays dynamic many-to-many relations whose assigned object is referenced through a dynamic Permitted dynamic objects are found in the DialogValidDynamicRef table. A menu is provided for choosing the object type.


A custom form must be created on which the data to be configured is displayed.

Displaying dynamic many-to-many relations.

  • Base object can be referenced through a dynamic key.

    - OR -

  • Assigned object is referenced through a dynamic key. In this case, the MembersTableName property must be defined in the form configuration.


A custom form must be created on which the data to be configured is displayed.

Assigning many-to-many relations.

If several additional many-to-many relations are mapped on a form, the FrmCommonTwoMemberRelation, FrmCommonFourMemberRelation, and FrmCommonFiveMemberRelation form templates can be used as alternatives. On tab is shown per many-to-many table.



For displaying the overview form.



For editing object master data.



For displaying reports.



For including wizards. The forms are displayed in a modal dialog window.

Related topics

Hierarchical display of data on assignment forms

Forms of the MemberRelation type are used to display the data in an assignment list (many-to-many relations). Enter the hierarchy path in the table definition to display the table hierarchically. Enter the foreign key column that the hierarchy should be based on.


An Active Directory user account (ADSAccount table) is typically displayed on an assignment form below its Active Directory container (UID_ADSContainer). The Active Directory container (ADSContainer table) is, on the other hand, displayed underneath its Active Directory domain (column UID_ADSDomain). The path for the hierarchy structure is entered as follows:

Table 43: Example of a hierarchy path
Table Hierarchy path


UID_ADSContainer, UID_ADSDomain



You can specify an alternative list for objects that do not have values in all foreign key columns after a pipe (|).



Related topics

Replacing default forms with custom forms

Self developed form templates can be provided for custom forms in a form archive (*CustomForms.*.vif). You need to add the form template, form definition and interface form with help of the Form Editor if you want to display your custom forms in the user interface.

A wizard is available to swap a default form with all its dependencies for a custom form. The wizard creates the interface form with the form definition and the form template. The properties of the new form are taken from the form it is replacing. The necessary assignments (object definition, menu item, permissions group, and application) are created for the new form and the replaced form is disabled.

To replace custom forms with all dependencies

  1. In the Designer, select the User interface | Forms | User interface forms category.

  2. Select hierarchical representation of the form overview. Set the Options | Tree/list view menu option to do this.

  3. At the highest hierarchy level of the form overview, select the form template of the form to be replaced and start the wizard using the Replace by context menu.

  4. On the start page of the wizard, click Next.

  5. On the Select file and form page, enter the following information.

    • Form archive file: Select the form achive file (*.CustomForms.*.vif).

    • Form template: Select the form template for the new user interface.

  6. On the Define form structure page, check the names of the form definitions and user interface forms. The names of the form definitions and user interface forms should all begin with CCC. Use F2 to change the names and select Enter to save the change.

  7. On the Select permissions group page, select the permissions group to which the new user interface form should be assigned. Use the button to create a new permissions group.

  8. The last page of the wizard summarizes the settings for replacing a form. To replace the form, click Finish.

    The wizard is closed after replacement is complete. The new form is displayed in the Form Editor form overview after the wizard is complete and you can continue editing it. The replaced form is disabled and can therefore no longer available in the user interface.

Related topics

User interface form properties

Table 44: User interface form properties
Property Meaning

Form name

The form name is used to quickly select interface forms, for example, in the Designer.

TIP: The form name is displayed in the administration tool as extra navigation information.

Form definition

Form definition linked to the user interface form.

NOTE: Use next to the input field to link in a new form definition for the interface form.


Caption shown on the user interface form. The caption is used to represent the user interface form in the task view and in the form context menu of the user interface. Translate the given text using the button.

Online help link

The form's help key for navigating to the relevant chapter in the online help.


Detailed description of the user interface form.

TIP: The description is shown as a tooltip in the task view.


Icon marks the user interface form in the user interface.

Sort order

The sort order determines the position of the interface form in the task view and in the form’s context menu in the administration tools.

NOTE: When you enter objects in the Manager, the user interface form of the Edit form type is always displayed with the lowest sort order.

Preprocessor condition

User interface forms can be given a preprocessor condition. This means that an interface form is only available when the preprocessor condition is fulfilled.

NOTE: In the Designer, you can find an overview of existing preprocessor dependencies in the One Identity Manager Schema | Preprocessor dependencies category.

Control deactivation

Specifies which buttons in the toolbar are to be disabled in the front-ends

Permitted values are:

  • Insert object: The button is disabled.

  • Update object: The button is disabled.

  • Delete Object: The button is disabled.

  • Save to database: The button is disabled


Use this option to label interface forms that should not be shown in the user interface.

NOTE: This change is also permitted for user interface forms in the default user interface and is not overwritten on schema installation.

Disabled by preprocessor

If an object definition is excluded through a preprocessor condition, this option is set by the Database Compiler.

Show modal

Specifies whether the form is displayed in a separate dialog box. Used by wizards for entering data.

Open on new tab

The form is opened on a new tab.


The configuration is used to limit the tables and columns on display. Templates for the configuration data definition are found in the pop-up list XML templates.

In the SpecialSheetData section, you can transfer special properties implemented during form development to the interface form. For example, the report name and special report parameters can be passed to the report interface form by using this section.

In the Properties section, you can transfer special properties of the form that were implemented during form development.

Insert values

Insert values are only of relevance to interface forms of the Edit form type. With them you can specify the default values for the columns that are assigned when a new object is added. The input is in VB.Net syntax.

Related topics
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating