Chat now with support
Chat with Support

Identity Manager 8.2.1 - Attestation Administration Guide

Attestation and recertification
One Identity Manager users for attestation Attestation base data Attestation policies Sample attestation Custom mail templates for notifications Suspending attestation
Approval processes for attestation cases
Approval policies for attestations Approval workflow for attestations Selecting attestors Setting up multi-factor authentication for attestation Prevent attestation by employee awaiting attestation Attestation by peer group analysis Managing attestation cases
Attestation sequence Default attestation and withdrawal of entitlements User attestation and recertification Mitigating controls Setting up attestation in a separate database Configuration parameters for attestation

Suspending attestation

To suspend attestation you have two options.

  1. Disable the schedule assigned to the attestation policy.

    As long as the schedule is disabled, no new attestation cases will be generated. This applies to all attestation policies that have this schedule assigned to them.

    For more information, see Attestation schedules.

  2. Disable the attestation policy

    Once an attestation policy is disabled, no new attestation cases are generated. In addition, all associated attestation cases are deleted. To avoid loosing the attestation history in the process, you can configure how data changes are logged.

    For more information, see Disabling attestation policies.

Related topics

Approval processes for attestation cases

All attestation procedures are subject to a defined approval process. During this approval process, authorized employees grant or deny approval for attestation objects. You can configure this approval process in various ways, and therefore customize it to meet your company policies.

You define approval policies and approval workflows for approval processes. Specify the approval workflows to apply to the attestation cases in the approval policies. Use approval workflows to find out, which employees in which order, can grant or deny attestation. An approval workflow can contain several approval levels and several approval steps. A special approval procedure is used to determine the attestors in each approval step.

Detailed information about this topic

Approval policies for attestations

One Identity Manager uses approval policies to determine the attestor for each attestation case.

To edit an approval policy

  1. In the Manager, select the Attestation > Basic configuration data > Approval policies category.

  2. Select an approval policy in the result list and run the Change main data task.

    - OR -

    Click in the result list.

  3. Edit the approval policy main data.

  4. Save the changes.

General main data of approval policies

Enter the following main data of an approval policy. If you add a new approval step, you must fill out the compulsory fields.

Table 19: General main data of approval policies



Approval policies

Approval step name.

Approval workflow

Workflow for finding attestors.

Select any approval workflow from the menu or click to set up a new approval workflow.

Mail templates

Mail template used to create email notifications for granting, denying, extending, unsubscribing, or canceling an attestation or for giving notice of its expiry.


Text field for additional explanation.

Detailed information about this topic
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating