Identity Manager 8.1.4 - Web Application Configuration Guide

Table of Contents

About this guide Configuring the Web Portal

IT shop configuration

Requesting by reference user

Enabling or disabling 'by reference user' Setting the reference user display

Enabling requests by peer group Sending the shopping cart

Setting the priority Confirming requests Forcing reauthentication Handling required products

Approver options

Setting validity periods Submitting inquiries Require a reason

Approval decisions about URL links

Displaying user-specific processes in the Web Portal Configuring self-registration of new users Configuring the four eyes principle for issuing a passcode. Configuring password questions

WebAuthn security keys

WebAuthn configuration

Step 1: Configuring an OAuth certificate Step 2: Configuring the RSTS Step 3: Configuring the application server Step 4: Configuring the web application

Starling Two-Factor Authentication

Setting up Starling Two-Factor Authentication Starling Two-Factor Authentication for specific people Logging in without Starling 2FA tokens Activating Starling Two-Factor Authentication for the Operations Support Web Portal

Password Reset Portal

Setting up a Password Reset Portal

Installing the Password Reset Portal Authentication Settable passwords Excluding passwords from being reset

Central password

Defining password dependencies Setting a central password Configuring checks for all passwords

Setting up a new application token Configuring Password Reset Portal login using target system user accounts

Recommendations for secure operation of web applications

Using HTTPS Disable automatic password storage Disabling the HTTP request method TRACE Using HTTP Strict Transport Security (HSTS) Disabling insecure encryption mechanisms Setting the "HttpOnly" attribute for ASP.NET session cookies Setting the "same-site" attribute for ASP.NET session cookies Setting the "secure" attribute for ASP.NET session cookies Disabling Windows IIS 8.3 short names Removing the HTTP response header in Windows IIS Creating X-Frame-Options HTTP response header Running web applications in release mode

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating

© 2026 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center