Chat now with support

Get Live Help
Complete Registration

Sign In

Request Pricing

Contact Sales

Identity Manager 8.1.5 - Attestation Administration Guide

Table of Contents

Attestation and recertification

One Identity Manager users for attestation Attestation base data

Attestation types

Default attestation types Additional tasks for attestation types

Overview of the attestation type Assigning attestation procedures

Attestation procedure

General master data for an attestation procedure Defining reports for attestation Default attestation procedures Additional tasks for attestation procedures

Overview of the attestation procedure Assigning approval policies Creating a copy

Default schedules Additional tasks for schedules

Schedule overview Assigning attestation policies Starting schedules immediately

Compliance frameworks

Additional tasks for compliance frameworks

Compliance framework overview Assigning attestation policies

Chief approval team Standard reasons for attestation

Predefined standard reasons

Attestation policies

General master data for attestation policies Risk assessment Default attestation policies Additional tasks for attestation policies

The attestation policy overview Assigning approvers Assigning compliance frameworks Mitigating controls

Assigning mitigating controls Creating mitigating controls

Running attestation for single objects Showing or hiding conditions Creating a copy Showing selected objects Deleting attestation policies

Disabling attestation policies

Custom mail templates for notifications

Creating and editing attestation mail templates General properties of a mail template Creating and editing a mail definition

Using base object properties Use of hyperlinks in the Web Portal

Default functions for creating hyperlinks

Customizing email signatures

Copying mail templates for attestation Displaying attestation mail templates previews Deleting mail templates for attestation Custom notification processes

Approval processes for attestation cases

Approval policies for attestations

General master data for approval policies Default approval policies Additional tasks for approval policies

Editing approval workflows Validity checking

Approval workflow for attestations

Working with the workflow editor Setting up approval workflows

Editing approval levels Editing approval steps Properties of an approval step Connecting approval levels

Additional tasks for approval workflows

The approval workflow overview Copying approval workflows

Deleting approval workflows Default approval workflows

Selecting attestors

Default approval procedures

Using attestation policies to find attestors Using roles of employees to be attested to find attestors Using attestation objects to find attestors Using attestation object managers to find attestors Using persons responsible for attestation objects to find attestors Using a specified role to find attestors Using product owners to find attestors Using owners of a privileged object to find attestors Using additional Active Directory group owners to find attestors Using owners of the attestation objects to find attestors Using employees assigned to user accounts to find attestors Calculated approval Approvals to be made externally Waiting for further approval

Setting up approval procedures

General master data for an approval procedure Queries for finding attestors

Additional tasks for approval procedures

Overview of the approval procedure Specifying permitted approval procedures for tables Copying an approval procedure

Deleting approval procedures Determining the responsible attestors

Setting up multi-factor authentication for attestation Prevent attestation by employee awaiting attestation Attestation by peer group analysis

Configuring peer group analysis for attestation

Managing attestation cases

Getting more information Appointing other attestors Escalating an attestation case Attestors cannot be established Automatic approval on timeout Aborting an attestation case on timeout Attestation through chief approval team

Attestation sequence

Starting attestation Additional tasks for attestation cases

Attestation case overview Approval sequence Attestation history

Modifying approval workflows for pending attestation cases Closing attestation cases for deactivated employees Deleting attestation cases Notifications in the attestation process

Demanding attestation Reminding attestors Scheduling attestation demands Reminding attestors about attestation objects Granting or denying attestation cases Notifying delegates Aborting attestation cases Escalation of attestation cases Delegating attestations Rejecting approvals Notifications with questions Notifications from additional attestors Link for verifying new external users Default mail templates

Attestation by mail

Processing attestation mails

Default attestation and withdrawal of entitlements

System entitlements attestation System role attestation Application role attestation Business role attestation

User attestation and recertification

One Identity Manager users for attesting and recertifying users Configuring user attestation and recertification Attesting new users

Self-registration of new users in the Web Portal Adding new employees using a manager or employee administrator Importing new employee master data Scheduled attestation Limiting attestation objects for certification

Recertifying existing users

Preparing for recertification The recertification sequence Limiting attestation objects for recertification

Mitigating controls

General master data for mitigating controls Additional tasks for mitigating controls

Mitigating controls overview Assigning attestation policies

Calculating mitigation

Configuration parameters for attestation

General master data for approval policies

Enter the following master data for an approval policy. If you add a new approval step, you must fill out the compulsory fields.

Table 16: General master data for approval policies
Property	Description
Approval policies	Approval step name.
Approval workflow	Workflow for finding attestors. Select any approval workflow from the menu or click to set up a new approval workflow.
Mail templates	Mail template used to create email notifications for granting, denying, extending, unsubscribing, or canceling an attestation or for giving notice of its expiry.
Description	Text field for additional explanation.

Detailed information about this topic

Default approval policies

One Identity Manager provides a default approval policy for default attestation of new users and recertification of all employees stored in the One Identity Manager database. Moreover, default approval policies are supplied through which different roles and system entitlements mapped in the Unified Namespace can be attested. You can use default approval policies for creating attestation policies in the Web Portal.

To edit default approval policies

In the Manager, select the Attestation | Basic configuration data | Approval policies | Predefined category.

For detailed information about using default approval policies, see the One Identity Manager Web Portal User Guide.

Related topics

Additional tasks for approval policies

After you have entered the master data, you can run the following tasks.

Editing approval workflows

Validity checking

Editing approval workflows

Here, you can edit the approval workflow assigned to the approval policy.

To edit the assigned approval workflow

Select Attestation | Basic configuration data | Approval policies.
Select the approval policy in the result list.
Select 1. Editing approval workflows.

This opens the Workflow Editor.

Detailed information about this topic

Working with the workflow editor

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating

© 2024 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center