Chat now with support
Chat with Support

Identity Manager 8.1 - Configuration Guide

About this guide One Identity Manager software architecture Customizing the One Identity Manager default configuration Adjusting the One Identity Manager base configuration One Identity Manager schema basics Editing the user interface
Object definitions for the user interface User interface navigation Forms for the user interface Statistics in One Identity Manager Extending the Launchpad Task definitions for the user interface Applications for configuring the user interface Icons and images for configuring the user interface Using predefined database queries
Localization in One Identity Manager Process orchestration in One Identity Manager
Setting up Job servers in Designer Configuring the One Identity Manager Service Handling processes in One Identity Manager
Tracking changes with process monitoring Conditional compilation using preprocessor conditions Scripts in One Identity Manager Reports in One Identity Manager Adding custom tables or columns to the One Identity Manager schema Web service integration SOAP Web Service One Identity Manager as SPML provisioning service provider Processing DBQueue tasks Appendix: Configuration files of the One Identity Manager Service

Uniqueness of data-dependent menu items

Menu items that are labeled with the option Unique have to contain variables in their names to achieve uniqueness.

IF, for example, all applications (table Application) are grouped by language, the name of the corresponding menu item must contain a variable, which references the column Ident_Language in the table Application.

Figure 13: Example of Data-Dependent Menu Item without Uniqueness (left) and with Uniqueness (right)

Related Topics

Recursive data-dependent menu items

The heart of the hierarchy is variable replacement. Variables are passed down through the hierarchical navigation view and can therefore be used at lower levels or can be overwritten. In the case of recursive data-dependent menu items, the variable contained in a database query is initially replaced by the existing variable value from the parent level and then the query is started. The resulting value immediately determines a new value for the variable that is processed again in the parent node’s next step. The original value of the old variable is no longer available after the database query has been executed. If the database query delivers an empty result, the recursion is stopped.

Figure 14: Example of Data-Dependent Menu Items with Recursive Calling (left) and without Recursive Calling (right)

Related Topics

Editing lists

You can apply list properties to fixed and data-dependent menu items. These properties determine how the table entries are displayed in the user interface result list.

For more information about general properties of menu items, see General menu item properties. To define a list, you need to use the following properties:

Table 41: List properties
Property Description
Display template

The display template for displaying table entries in the administration tool result lists are displayed. If a customer specific display template exists it is used instead of the default display template.

Syntax: %column name%

Object Definition of the object which determines the list items.
Condition

Condition for limiting the number of results. The input must comply with the WHERE clause syntax of database queries. The condition relates to the given object definition. The condition is consolidated with the condition which is already stored for the object definition. The variables can be used that are available in the navigation interface.

Icon Icon for displaying the items in the list.
Sort order

Columns to use for the list order. The input must satisfy the Order By syntax of database queries. You should use a sort order if the data has a date or represents language-dependent data. For language-dependent sorting, use the configuration switch Re-sort data result by caption.

Insert values

Insert values initialize individual values when a new data set is added over the result list. Enter insert values in VB.Net syntax. When defining insert values, you can apply the variables currently available in the navigation.

Insert in list permitted Specifies whether you are generally allowed to insert entries in the corresponding result list Whether or not users are allowed to insert entries depends on their permissions. For detailed information on assigning permissions, see the One Identity Manager Authorization and Authentication Guide.
Permit deletion in list Specifies whether you are generally allowed to delete entries in the corresponding result list Whether or not users are allowed to delete entries depends on their permissions. For detailed information on assigning permissions, see the One Identity Manager Authorization and Authentication Guide.
Related Topics

Display template for displaying a list

You use a list display template to specify the form in which the table entries will be represented in the administration tool result list. You can define display templates for menu items, object definitions and table lists.

The display template is determined by the following in order:

  1. List display template for the menu item
  2. Object definition display template
  3. Table display template

The display template for displaying a list can be described in the following syntax:

%columnname%

All the columns that belong to the table that will be displayed can be used in the display template. Variables may not be used in display templates for lists.

Replacement of the display template supports the ?? operator. Thus you can formulate conditional display templates with the following syntax.

%columnname1??columnname2??columnname3%

%columnname ?? columnname2%

The first column that returns a value from the list of column names is used. Spaces are permitted before and after the ?? operator. Spaces are not allowed at the beginning and end of the conditional display template for performance reasons.

Example of a Display Template

The Active Directory user account (table ADSAccount) should be shown as follows:

Common Name (fully qualified domain name)

The display template for the table ADSAccount to be specified for this purpose is:

%cn% (%CanonicalName%)

Related Topics
Related Documents