Chat now with support
Chat with Support

Identity Manager 9.3 - Web Application Configuration Guide

About this guide Managing the API Server Configuring API projects and web applications
General configuration Configuring the Administration Portal Configuring the Application Governance Module Configuring the Password Reset Portal Configuring the Web Portal
Configuring departments Configuring address books Ansichten konfigurieren Configuring application roles Configuring the Application Governance Module Configuring attestation Configuring authentication by accepting the terms of use Configuring request functions Configuring delegation Configuring your own API filter Configuring your own filters Configuring recommendations for adding entitlements to objects Configuring devices Configuring business roles Configuring the help desk module/tickets Configuring hyperviews Configuring identities Configuring password questions Configuring cost centers Configuring service items Program functions for the Web Portal Configuring software Configuring locations Configuring statistics Configuring system roles Skip table sorting Configuring team roles Configuring the four eyes principle for issuing a passcode. Configuring WebAuthn security keys
Configuring the Operations Support Web Portal
Recommendations for secure operation of web applications

Enabling or disabling identity creation

You can specify whether new identities can be created in the Web Portal.

Required configuration keys:

  • Identities can be created (EnableNewPerson): Specifies whether users can create identities.

To enable or disable creation of identities

  1. Log in to the Administration Portal (see Logging in to the Administration Portal).

  2. In the navigation, click Configuration.

  3. On the Configuration page, in the Show configuration for the following API project drop-down, select the Web Portal API project.

  4. Expand the Identities can be created configuration key.

  5. Perform one of the following actions:

    • To enable creation, select the Identities can be created check box.

    • To disable creation, clear the Identities can be created check box.

  6. Click Apply.

  7. Perform one of the following actions:

    • If you want to apply the changes locally only, click Apply locally.

    • If you want to apply the changes globally, click Apply globally.

  8. Click Apply.

Configuring maximum size for profile pictures

To prevent users from uploading profile pictures that are too large, you can set the maximum picture size of profile pictures. Images that exceed this maximum size are automatically resized to the maximum size.

Required configuration keys:

  • Maximum profile picture height (in pixels) (PersonImageMaxWidth): Defines the maximum height of a profile picture.

  • Maximum profile picture width (in pixels) (PersonImageMaxHeight): Defines the maximum width of a profile picture.

To skip sorting a table

  1. Log in to the Administration Portal (see Logging in to the Administration Portal).

  2. In the navigation, click Configuration.

  3. On the Configuration page, in the Show configuration for the following API project drop-down, select the Web Portal API project.

  4. Expand the Maximum profile picture height (in pixels) configuration key.

  5. In the Value input field, enter the maximum height of a profile picture.

  6. Expand the Maximum profile picture width (in pixels) configuration key.

  7. In the Value input field, enter the maximum width of a profile picture.

  8. Click Apply.

  9. Perform one of the following actions:

    • If you want to apply the changes locally only, click Apply locally.

    • If you want to apply the changes globally, click Apply globally.

  10. Click Apply.

Configuring time for actions for responsibilities of identities

You can specify how many days before identities leave the company their responsibilities are marked with "Action needed". The managers of these identities can then take action to prevent objects from remaining without an active responsibility.

Required configuration keys:

  • Time from which actions for responsibilities of leaving identities are needed (in days) (ThresholdPersonWarnDaysBeforeLeave): Specifies how many days before an identity leaves the company, their responsibilities are marked with "Action needed".

To configure time for action

  1. Log in to the Administration Portal (see Logging in to the Administration Portal).

  2. In the navigation, click Configuration.

  3. On the Configuration page, in the Show configuration for the following API project drop-down, select the Web Portal API project.

  4. Expand the Time from which actions for responsibilities of leaving identities are needed (in days) configuration key.

  5. In the Value input field, enter the number of days before identities leave the company from which their responsibilities should be marked with Action needed. For example, if you enter 30 here, the responsibilities of identities that are at least 30 days away from leaving the company will be marked with Action needed on the Responsibilities of My Reports page in the Web Portal.

  6. Click Apply.

  7. Perform one of the following actions:

    • If you want to apply the changes locally only, click Apply locally.

    • If you want to apply the changes globally, click Apply globally.

  8. Click Apply.

Configuring password questions

If Web Portal users forget their password, they can login in to the Password Reset Portal with the help of the password questions and set a new password.

Required configuration keys:

  • Login with password questions (EnablePasswordProfileLogin): Specifies whether users can login by answering their password questions.

  • Password questions can be managed (VI_MyData_MyPassword_Visibility): Specifies whether users can manage their password questions and answers.

To configure password questions

  1. Log in to the Administration Portal (see Logging in to the Administration Portal).

  2. In the navigation, click Configuration.

  3. On the Configuration page, in the Show configuration for the following API project drop-down, select the Password Reset Portal API project.

  4. Expand the Login with password questions configuration key.

  5. Select the Login with password questions check box.

  6. On the Configuration page, in the Show configuration for the following API project drop-down, select the Web Portal API project.

  7. Expand the Password questions can be managed configuration key.

  8. Select the Password questions can be managed check box.

  9. Click Apply.

  10. Perform one of the following actions:

    • If you want to apply the changes locally only, click Apply locally.

    • If you want to apply the changes globally, click Apply globally.

  11. Click Apply.

  12. Start the Designer program.

  13. Connect to the relevant database.

  14. Configure the following configuration parameters:

    TIP: To find out how to edit configuration parameters in Designer, see the One Identity Manager Configuration Guide.

    • QER | Person | PasswordResetAuthenticator | QueryAnswerDefinitions: Specify how many password questions and answers users must enter. Users who do not enter enough or any questions and answers, cannot log in to the Password Reset Portal using their password questions.

      NOTE: The value must not be less than the value in the QueryAnswerRequests configuration parameter.

    • QER | Person | PasswordResetAuthenticator | QueryAnswerRequests: Specify how many password questions users have to answer before they can log in to the Password Reset Portal.

      NOTE: The value must not be higher than the value in the QueryAnswerDefinitions configuration parameter.

    • QER | Person | PasswordResetAuthenticator | InvalidateUsedQuery: Specify how many new password questions and answers users must enter after they have successfully logged in to the Password Reset Portal. If this option is enabled, correctly answered password questions are deleted after logging in to Password Reset Portal.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating