Chat now with support
Chat with Support

Identity Manager 8.1 - Attestation Administration Guide

Attestation and recertification
One Identity Manager users for attestation Attestation base data Attestation policies Creating custom mail templates for notifications
Approval processes for attestation cases
Approval policies Approval workflows Selecting attestors Setting up multi-factor authentication for attestation Prevent attestation by employee awaiting attestation Managing attestation cases
Attestation sequence Default attestation and withdrawal of entitlements User attestation and recertification Mitigating controls Appendix: Configuration parameters for attestation

Creating and editing an email definition

Mail texts can be defined in these different languages in a mail template. This ensures that the language of the recipient is taken into account when the email is generated.

To create a new mail definition

  1. Open the mail template in Mail Template Editor.

  2. Click the button next to the Mail definition list.

  3. Select the language you want the mail definition to apply to from Language.

    All active languages are shown in the list. To use additional languages, enable the relevant countries in Designer. For detailed information, see the One Identity Manager Configuration Guide.

  4. Enter the subject in Subject.

  5. Edit the mail text in the Mail definition view with the help of the Mail Text Editor.

  6. Save the changes.

To edit an existing mail definition

  1. Open the mail template in Mail Template Editor.

  2. Select the language in Mail definition.

  3. Edit the mail subject line and the body text.

  4. Save the changes.

Using base object properties

In the subject line and body text of a mail definition, you can use all properties of the object entered under Base object. You can also use the object properties that are referenced by foreign key relation.

To access properties use dollar notation. For more detailed information, see the One Identity Manager Configuration Guide.


An attestor should receive email notification of new attestations.

Table 11: Email Notification Properties



Base object



New attestations

Mail body

Dear $FK(UID_PersonHead).Salutation[D]$ $FK(UID_PersonHead).LastName$,

There are new attestations pending for the attestation policy "$FK(UID_AttestationCase).UID_AttestationPolicy[D]$".

Created: $FK(UID_AttestationCase).PolicyProcessed:Date$

You can see this request in the "One Identity Manager Self Service Portal".

Best regards

Use of hyperlinks in the Web Portal

You can add hyperlinks to Web Portal in the mail text of a mail definition. If the recipient clicks on the hyperlink in the email, the Web Portal is opened on that web page and further actions can be carried out. In the default version, this method is implemented in attestations.

Prerequisites for using this method

  • The QER | WebPortal | BaseURL configuration parameter is enabled and contains the URL path to Web Portal. You edit the configuration parameter in Designer.

    http://<server name>/<application>


    <server name> = name of server

    <application> = path to the Web Portal installation directory

To add a hyperlink to Web Portal in the mail text

  1. Click the position in the mail text of the mail definition where you want to insert a hyperlink.

  2. Open the Hyperlink context menu and enter the following information.

    • Display text: Enter a caption for the hyperlink.

    • Link to: Select the File or website option.

    • Address: Enter the address of the page in the Web Portal that you want to open.

      NOTE: One Identity Manager provides a number of default functions, which you can use to create hyperlinks in Web Portal.

  3. To accept the input, click OK.

Default functions for creating hyperlinks

Several default functions are available to help you create hyperlinks. You can use the functions directly when you add a hyper ink in the mail body of a mail definition or in processes

Direct function input

A function is referenced in Address when a hyperlink is inserted:




Default Functions for Requests

The script VI_BuildAttestationLinks contains a collection of default functions for composing hyperlinks to directly grant or deny approval of requests from email notifications.

Table 12: Functions of the VI_BuildAttestationLinks script




Opens the attestation page in the Web Portal.


Approves an attestation and opens the attestation page in the Web Portal.


Denies an attestation and opens the attestation page in the Web Portal.


Opens the page for answering a question in the Web Portal.


Opens the page with pending attestations in the Web Portal.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating