• Filter additional subscribers for reports

    Hello,

    We are using Identity 9.0 CU5.

    We have a few subscribable reports that are only assigned to a selected group of users.

    We would like to filter who these reports can be forwarded to, when using the "Add subscription"> "Add additional subscribers…

  • Unable to set the date value on request property (9.0LTS)

    We are in the last throws of 9.0LTS before moving to V10.  However, I am trying display a date from a record.  However, while I can set the field, it does not seem to show on the form.  To test, I created a date field, a person record lookup and a toggle…

  • Best Practice for Account Definition assignment just-in-time once permission requested and assigned.

    Hello,

    We are trying to achieve the assignment of Account Definition of target system just-in-time when end use request for group of target system is approved. Is there any ideally out-of-the-box and best practice for this? I was thinking about two approaches…

  • How to automate Business role assignments to System Role - Bulk

    Hello,

    We are looking for a way to automate the assignments of Business roles to System roles in OIM 9.3.

    We are open to SQL queries, PowerShell scripts, import from Launchpad executable or other solutions. 

    The simplest way is preferred.

    Thank you.

  • Attestation Denial Not Removing PersonWantsOrg Assignment

    Hi Team,

    I have created an attestation based on PersonWantsOrg. My expectation is that when the attestation is denied, the related request should be unsubscribed/cancelled and the assigned role should be removed immediately.

    Currently, when the attestation…

  • Service item dependency

    Hello,

    I am using OIM version 10.0.

    Is it possible to prevent a user from requesting Service Item B if they have already been assigned Service Item A? I tested the dependency settings between Service Items, but they only work when the items are requested…

  • Web Portal – Attestation Run dropdown not populating dynamically when parameter uses $PC() reference (works fine in Manager)

    I have a custom report (copy of ATT_AttestationPolicy AttestationRun_Details_with_history) ("<TargetSystem> - Attestation Details" / similar attestation reports) with two report parameters:

    • Attestation policy (UID_AttestationPolicy)
  • Provision fields on Success Factors via Starling connector

    Hello all,

    lately I have been trying to configure a custom process to provision Email e and CentralAccount to some SuccessFactors fields.

    I created the mappings and the provisioning workflows, and I know those works if I run manually the FullSynchronization…

  • Web Portal issues with different data types

    Hi folks,

    We are trying to update our current One Identity Manager installation from v9.2 to v10.0. So, we are designing the web portal from scratch (as we were using Web Designer before).

    During creating new request types, we've faced an issue related…

  • Showing Different Data Types in Web Portal

    Hi folks,

    We are trying to update our current One Identity Manager installation from v9.2 to v10.0. So, we are designing the web portal from scratch (as we were using Web Designer before).

    During creating new request types, we've faced an issue related…

  • How to Centralize Manager/Subordinate Update Logic in One Identity Manager

    Hello everyone,

    we are currently reviewing the way some custom business rules are implemented in our One Identity Manager environment, specifically around the maintenance of manager and subordinate relationships between Persons and Departments.

    The logic…

  • Password reset process

    Hello,

    I'm using Identity Manager version 10.0.

    Is it possible for an admin to reset a user’s password so that it is automatically generated and sent directly to the user by email, without the admin knowing it?

    Thank you

    BR

    Daniele

  • Step-by-Step Guide Request: Integrating Identity Manager with Safeguard PAM

    Hello Community,

    I am looking for a clear, step-by-step guide on integrating Identity Manager with Safeguard PAM, including all pre-requisite installations and configurations that need to be in place before starting the integration.

    This is my first time…

  • A SAP client (mandant) was already synchronized and currently has: Synchronized by = No synchronization Objects already exist in One Identity (users, roles, etc.) Now I need this client to be managed by One Identity Manager (i.e. NamespaceManagedBy...

    A SAP client (mandant) was already synchronized and currently has:

    Synchronized by = No synchronization
    Objects already exist in One Identity (users, roles, etc.)

    Now I need this client to be managed by One Identity Manager (i.e. NamespaceManagedBy / Synchronized…

  • How to send an email when added to a Business Role

    I am running version 9.0LTS

    We are adding users to Business roles and I am wanting to trigger a Welcome Email when they are assigned to some business roles.

    There is no Mail notification option in the business role dialog box where I could set this.  The…

  • Generic Database Connector - MySql DB Synchronization Error

    Hello All,

    I have deployed One Identity Manager using the three tier topology, Admin Workstation, Job Server, and Web Server.

    I have created a Synchronization Project for HR System through MySql Connector using Generic Database Connector. Upon running…

  • Has anyone implemented a Person-insert-driven correlation in One Identity Manager in production, instead of relying on the usual AD-sync-driven correlation?

    We sometimes have a trainee/intern who already has an existing ADSAccount created manually or through a previous process. Later, this person gets hired as an employee and is added to the HR source. When the HR synchronization runs, it creates or updates…

  • If the role is already assigned through a dynamic role then it should not be requestable in IT Shop. Could you please suggest how to achieve this?

    If the role is already assigned through a dynamic role then it should not be requestable in IT Shop. Could you please suggest how to achieve this?

  • System Journal Error dbo.QBM_FGISessionErrorForLog()

    Hi Team,

    We recently upgraded the system to 9.3 version and we are in process of testing the functionalities.

    I can see the below error in system journal, could someone please advice on how to resolve would be helpful.

    (execute slot single)error(s) detected…

  • Configure report for Admin activities

    Hi Team,

    Could you please assist me with the following query?

    Problem Scenario:
    One of our client requirements is to capture and report on admin activity logs. Specifically, when an administrator logs into OIM tools (e.g., Designer) and makes changes such…

  • Importing a transport package from a lower OneIM version (9.2.2) to a higher OneIM version (9.3.1)

    Hi everyone.

    We have a peculiar case that we found ourselves in and I'm turning to you for advice.

    Our customer has 4 environments with following versions:

    - Development (version 9.3.1)
    - Quality assurance (version 9.2.2)
    - Staging (version 9.2.2)

  • MFA with RSTS

    Hi,

    I am using IDM version 10.0.

    I configured SSO using One Identity RSTS, and it is working correctly. However, when I try to configure MFA via RADIUS, I get the following error:

    "An error occurred while testing the settings: Exception has been thrown…

  • Unable to fetch Future dated TEMP HIRES


    We are trying to synchronize Temporary employees from Successfactor via starling connector. We are unable to get Temp Hires with Hire Date as Future date. We are getting Temp Hires only if hire date is the current day. We have already enabled configuration…

  • Password reset portal

    Hi,

    is there a way in the Password Reset Portal of the API Server to make it so that users only see certain accounts on which they can perform a reset?

    For example, I would like them to be able to reset only the Active Directory account password and not…

  • Active directory connection issue

    Hello,

    I am using One Identity Manager 10.0. The job service runs on a server joined to domain X. I am configuring, in the Sync Editor, the connector to AD for domain Y, but I get the error 'The specified domain does not exist or cannot be contacted'…