Chat now with support
Chat with Support

Identity Manager 8.1 - Attestation Administration Guide

Attestation and recertification
One Identity Manager users for attestation Attestation base data Attestation policies Creating custom mail templates for notifications
Approval processes for attestation cases
Approval policies Approval workflows Selecting attestors Setting up multi-factor authentication for attestation Prevent attestation by employee awaiting attestation Managing attestation cases
Attestation sequence Default attestation and withdrawal of entitlements User attestation and recertification Mitigating controls Appendix: Configuration parameters for attestation


Use schedules to automate attestation. These specify when and how often attestation cases are created. One Identity Manager supplies several default schedules for attestation.

To edit schedules

  1. In Manager, select the category Attestation | Basic configuration data | Schedules.

    The result list shows all schedules configured for the AttestationPolicy table.

  2. Select a schedule in the result list and run the task Change master data.

    - OR -

    Click in the result list toolbar.

  3. Edit the schedule’s master data.

  4. Save the changes.

Enter the following properties for a schedule.

Table 4: Schedule properties




Schedule ID. Translate the given text using the button.


Detailed description of the schedule. Translate the given text using the button.


Table whose data can be used by the schedule. Schedules for the attestation must refer to the AttestationPolicy table.


Specifies whether the schedule is enabled or not.

NOTE: Only active schedules are executed.

Time zones

Unique identifier for the time zone that is used for executing the schedule. Choose between Universal Time Code or one of the time zones in the menu.


When you add a new schedule, the time zone is preset to that of the client from which you started the Manager.

Start (date)

The day on which the schedule should be run for the first time.

Validity period

Period within which the schedule is executed.

  • If the schedule will be run for an unlimited period, select the option Unlimited duration.

  • To set a validity period, select the option Limited duration and enter the day the schedule will be run for the last time in End (date).


Interval in which the task is executed. Permitted interval types are Every minute, Hourly, Daily, Weekly, Monthly and Yearly.

For the Weekly interval type, specify the precise weekday. For the Monthly interval type, specify the day of the month (1st to 31st day of the month). For the Yearly interval type, specify the day of the year (1st to 366th day of the year).

NOTE: Schedules with the sub interval 31 and the Monthly interval type are executed on the 31st day of the month. The task is, therefore, only run in months with 31 days. Similarly, schedules with the Yearly interval type and the sub interval 366 are only executed in leap years.

Start time

Fixed start type for the Daily, Weekly, Monthly and Yearly interval types. Enter the time in local format for the chosen time zone.

For the interval types Every minute and Hourly, the start time is calculated from the rate of occurrence and the interval type.

Repeat every

Rate of occurrence for executing the schedule within the selected time interval. For the Weekly interval type, select at least one weekday.

Last planned run/Next planned run

Execution time calculated by the DBQueue Processor. They are recalculated each time a schedule is run. The time of the next run is calculated from the interval type, rate of occurrence and the start time.

NOTE: The One Identity Manager provides the start information in the time zone of the client where the program was started. Changes due to daylight saving are taken into account.

Default schedules

One Identity Manager supplies the following attestation schedules by default:

Table 5: Default attestation schedules




Default schedules for any attestation.



Weekly (Monday)



Default schedule for user recertification.

This schedule is disabled, by default. To run recertification, assign a custom schedule to the attestation policy and enable it.


Default schedules for any attestation.

This schedule is assigned to the New user certification attestation policy by default.

Related Topics

Additional tasks for schedules

After you have entered the master data, you can apply different tasks to it. The task view contains different forms with which you can run the following tasks.

Schedule overview

You can see the most important information about a schedule on the overview form.

To obtain an overview of a schedule

  1. In Manager, select the category Attestation | Basic configuration data | Schedules.

  2. Select the schedule in the result list.

  3. Select Schedule overview.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating