Chat now with support
Chat with Support

Identity Manager 8.1 - Attestation Administration Guide

Attestation and recertification
One Identity Manager users for attestation Attestation base data Attestation policies Creating custom mail templates for notifications
Approval processes for attestation cases
Approval policies Approval workflows Selecting attestors Setting up multi-factor authentication for attestation Prevent attestation by employee awaiting attestation Managing attestation cases
Attestation sequence Default attestation and withdrawal of entitlements User attestation and recertification Mitigating controls Appendix: Configuration parameters for attestation

Running attestation for single objects

Use this task to start attestations independently from a schedule. If you run the task, a separate window is opened. Select the objects to be attested now from a list of all attestation objects. The selection is one-off.

The Close obsolete tasks automatically option is not taken into account in the list of attestation objects.

To start attestation for the selected objects

  1. In Manager, select Attestation | Attestation policies.

  2. Select the attestation policy in the result list. Select Change master data.

  3. Select Run attestation cases for single objects....

    This opens a separate window.

  4. In the Attestation column, select every object for which attestation is to be run.

  5. Click Run.

    Attestation cases are generated for the selected attestation objects. As soon as DBQueue Processor has processed the task, you will see the newly created attestation cases in the navigation view under Attestation runs | <attestation policy> | Attestation runs | <year> | <month> | <day> | Pending attestations.

  6. Click Close.

Showing or hiding conditions

The condition for finding attestation objects can be viewed and edited in the Where Clause Wizard. The SQL query for this condition can be displayed on the master data form.

To show the condition for finding attestation objects on the master data form

  1. In the Manager, select Attestation | Attestation policies.

  2. Select the attestation policy in the result list and run Change master data.

  3. Select the task Show condition in the task view.

    This displays the Condition text box on the master data form. The condition is written like a database query Where clause. You can edit it directly.

To hide the condition for finding attestation objects

  1. In Manager, select Attestation | Attestation policies.

  2. Select the attestation policy in the result list and run Change master data.

  3. Select Hide condition in the task view.

    The input field Condition is no longer displayed on the master data form.

Creating a copy

You can make copies of attestation policies and use them to modify default attestation policies, for example.

To copy an attestation policy

  1. In the Manager, select Attestation | Attestation policies.

  2. Select the attestation policy in the result list.

  3. Select Create copy in the task view.

  4. Confirm the security prompt with Yes.

    The attestation policy copy is displayed on the master data form with the name Copy of <Name of original attestation policy>. You can edit this attestation policy.

Showing selected objects

To show a list of attestations found

  1. In Manager, select Attestation | Attestation policies.
  2. Select the attestation policy in the result list and run Change master data.
  3. Select Show selected objects in the task view.

    An additional Result tab is shown on the master data form. This displays a list of attestation objects found through the condition. The option Close obsolete tasks automatically is not taken into account in this case.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating