Hi everybody,

In our environment we need to create temporary users in active directory and deprovision them after X hours (with a maximum of 12 hours).

We thought of using AD group temporary memberships.

Specifically, when a user is created, it is added…

Hi

I'm trying to get a workflow to run which will update extensionAttribute7 of a user object when it's been added to a group based on the users job title.
e.g. Joe Bloggs gets added to the group, his title is IT, EA7 needs to be set to "03452…

Hi

We have a pilocy workflow which is due to run after a new user object is created, but it is not.

The workflow is a simple one ot send an email, but it should only run when the "Custom Attribute 3" of the new user is set to "DCs".…

We have several workflows setup that have approval steps in them.   A tech adds a user to a certain group, they get a pop up for justification, that gets emailed to manager and then they approve or reject the request.  This has worked great for over a year…

Hi,

I am working on a workflow to do some automation on our computer objects, and I am running into a weird issue that I am struggling to wrap my head around.

The error I am receive:

Executing the 'Run script: DEV New Computer Object Tag Location on…

I created a virtual attribute and linked it to a class that isn't a user or a group. It's actually a class that was implemented through a schema extension. I also created a workflow policy and the first step is to search for objects of this class. Unfortunately…

Hello,

This is my very first posting to any One Identity forum.  I recently upgraded my Active Roles server from 7.4.3 to 8.0 and noticed that some of my workflows are throwing web errors.  This big red error banner on the approval pop-up states "Object…

Hi,

I'm using Active Roles 7.5 and I'm looking for assistance on creating a workflow (on demand or automated) where the trigger isn't initiated within an Active Roles operation.  We have our computers sorted into Operating system and type…

Have created a scheduled Workflow that searches for accounts that have the employeetype = contractor, and accountexpires > 90 days or accountexpires is empty.  When the workflow is run, it successfully finds the accounts that have accountexpires > 90…

Hi! I am trying to figure out the best way to handle this situation. When we create accounts, we set 2 virtual attributes (edsvaLMSManager and edsvaLMSApprover). Both of these virtual attributes use the DN of the users that are set for their LMSManager…

In the approval notification for when a users account expiration is changed, the client is wanting to show a date when the account will expire, or the number of days until the account expires.  The problem is that if we add the AccountExpires attribute…

I am trying to create a workflow to send a list of group members to the group owner every so often to validate correct group members.

I wrote a custom powershell script and have it run in a workflow.

I'm having an issue with the try catch statement. If I remove try catch and just run the command inside the try method, the workflow executes fine. However, when a try catch is added,…

We have some different divisions that I have created workflows to manage, but there are some items that are duplicated over multiple workflows. Is there a way to have a Workflow launch another workflow? If so, it would allow me to consolidate the common…

Hello All,

my customer asks, if it is possible to run workflows in parallel? If a new User is created, different attributes should be set by different people (e.g. mobile number, Telephone number ertc.). And it make no sense to set the telephone number…

Hi,

I would like to create a workflow that triggers a notification when a specific attribute is set to a specific value.

We have created a custom attribute that will hold a specific value that we would like to monitor.

The workflow should work on a schedule…

Hi everyone,

Does anyone know how I can set an attribute of my choice, to the e-mail address of the secondary owner of the workflow target? 

So far, I have the following: 

>>Operation execution: Create User; where secondary owner of workflow target is not…

We've got Okta provisioning users, soon to be from Workday, through Okta, and then into AR. However, the issue that I'm running into is that when a user is created in Okta that then is replicated to ARS, ARS isn't seeing it as a new user creation. Because…

    Management has asked that we limit the time a user is a member of the Enterprise Admins group.  I am copying a workflow that we use for approval of membership in the Domain Admins group, however I see no way to add a time component to the workflow.  Is…

Hi all!

I need to dynamically find all attributes modified in function onPreModify($Request).

I do NOT want to something like:

function onPreModify($Request)

{

if ((IsAttributeModified "edsva_myattribute" $Request) -eq $true)

        {
            #do something…

What would be the best way, if possible, to remove a user from a group Group1_Test whenever they are a member of another group that begins with Group1. For example, I am currently a member of Group1_Test and I am now being added to Group1_Test2. Is there…

Hi guys,

Right now we have some new hire and departure workflows set up on a per-user basis, as HR wants the emails to come from them, rather than an HR alias. I was wondering if it's possible to have the from address in a workflow be dynamic based on…

Hello,

Im trying to get the search results into a mail notification, I can perform actions to the search results (Disable users, change properties, etc) But I can not get the notification to send me users that matched the search condition.

Anyone has…

Hello

We need to generate a workflow that sends daily reports about users matching conditions such as the following:

-Users with 30 days without changing password

-Users with the "User cannot change password" option selected

-Users that do…

Hello,

I'm currently running ARS 6.9 and am trying to understand some basic workflow functionality.

For a basic example I have a test workflow like so:

There's a parameter for it aptly named 'TestParam'. This parameter is set as a string that's…