Chat now with support
Chat with Support

Identity Manager 8.1 - Attestation Administration Guide

Attestation and recertification
One Identity Manager users for attestation Attestation base data Attestation policies Creating custom mail templates for notifications
Approval processes for attestation cases
Approval policies Approval workflows Selecting attestors Setting up multi-factor authentication for attestation Prevent attestation by employee awaiting attestation Managing attestation cases
Attestation sequence Default attestation and withdrawal of entitlements User attestation and recertification Mitigating controls Appendix: Configuration parameters for attestation

Delegating attestations

If, in an approval step, other attestors can be authorized to make the approval decision, the additional attestors can be prompted to approve by email. The same applies if the attestation can be delegated.

To set up the notification procedure

  • Enter the following data for the approval step.

    Mail template delegation: Attestation - Delegated/additional approval

    TIP: To enable approval by e-mail, select the Attestation - delegated/additional approval (by email) mail template.
Related Topics

Rejecting approvals

The original attestor must be notified if an additional attestor or employee to whom an attestation has been delegated refuses the approval decision.

To set up the notification procedure

  • Enter the following data for the approval step.

    Mail template rejection: Attestation - Reject approval

    TIP: If you allow approval by email, select the mail template Attestation - reject approval (by mail).
Related Topics

Notifications with questions

Employees can be notified when a question about an attestation is asked. Similarly, the attestors can also be notified as soon as the question is answered.

To send a notification when an attestor asks a question

  • In Designer, enable the QER | Attestation | MailTemplateIdents | QueryFromApprover configuration parameter.

    A notification is sent by default with the Attestation - question mail template.

To send a notification to the attestor when the questioned employee answers a question

  • In Designer, set the QER | Attestation | MailTemplateIdents | AnswerToApprover configuration parameter.

    A notification is sent by default with the Attestation - answer mail template.

TIP: Change the value of the configuration parameter in order to use custom mail templates for these mails.

Notifications from additional attestors

The original attestor can be notified when an additional attestor or an employee who has been delegated an attestation has granted or denied the attestation. This mail is send the moment the approval step has been decided.

To send a notification when the additional attestor approves or rejects the attestation

  • In Designer, enable the QER | Attestation | MailTemplateIdents | InformAddingPerson configuration parameter.

    A notification is sent by default with the attestation - approval of added step mail template.

To send a notification when the employee who was delegated an approval approves or denies the attestation.

  • In Designer, enable the QER | Attestation | MailTemplateIdents | InformDelegatingPerson configuration parameter.

    A notification is sent by default with the attestation - approval of delegated step mail template.

TIP: Change the value of the configuration parameter in order to use custom mail templates for these mails.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating