• Unable to create new employee


    I hope someone can help. I plan to log a ticket tomorrow if I get no response tonight.

    I'm unable to create new employees in Manager or Data import process. I get no error and manager or data importer just locks. I can create new business roles…

  • What must be done to obtain a unique schema property?

    In a sync project for data exchange with an application based on an MSSQL database, we use the sync project for MSSQL databases.
    The mapping is set up so that the desired data can be determined and transferred. However, when we run the first simulation…

  • Source Control (git) for Identity Manager

    Hi All,

    Wondering if anyone has come up with a means of getting away from zip file transports and into storing text-based configs in source control such as git. 

    The options I see are:

    Use transports for extraction

    1. Developers use the standard OneIM tools…
  • Employee's manager with no editing rights in the web shop

    Hello everyone,

    in the web portal, by default, each employee's manager can add, edit and assign a new manager to an employee.

    Is it possible  for manager only view their employees while only some specific employees can add, edit (all) employees and…

  • Does Key Resolution by reference work with XObjectKey?


    We are planning to provide an application with information from the One-IM database.
    Here we have created a custom table - including with a column CCC_DepartmentX, which contains the XObjectKey of the department. 

    Since it is an MSSQL database, we…

  • Execute process for same object sequentially

    Hi, I am currently preparing a process which executes whenever there is any change happens to the ADAccount's CN or SAMAccountName, STatus etc.

    But issue is the there are many times, there will be multiple process gets triggered for same object withing…

  • GET UID_Job of the executing process

    Hi team, how can I get UID_JOB of the current root process being executed in Job queue, so that i can use that UID for my operation in other node of the same process

  • Report for group primary and secondary owners


    I'm trying to create a report for users to run to get all groups they are the primary or secondary owner of.

    I have the first part which is the primary owners but having difficulty with the secondary owners. Since they are not linked to a table…

  • Business role for active directory groups take a long time to add users


    Has anyone seen any issues with adding users to groups through a business role?

    We have a few that we need to add users to upon creation. It seems to take a good while before the users get added to the group.

    The business role is assigned but the…

  • How to send approval notification to group mailbox instead of single approvers?

    Dear 1IM community,

    Our use case requires to send approval notifications and reminder emails to a group mailbox instead of the single approvers' email addresses.

    Currently we are using the standard OA - Product owner approval procedure.

    Do you have…

  • VI_UserRegistration_Web compiler error since migration


    since the migration to 8.1.2 we have a compiler error in VI_UserRegistration_Web that we cannot understand because it was never used or extended.

    2020-09-30 09:24:36 +02:00 - Serious -         Error in CCC_Start, nodes VI.WebDesigner.Definition…

  • why a user can connect to the web only after iisreset?

    The user couldn't connect to the web and get always the exception:

    "Beim Ausführen der Formularmethode F0_ctl00_Main_Main_ControlRef1_Button1_Method ist ein Fehler aufgetreten. Object reference not set to an instance of an object" 

  • Compiling HTML Applications (API Server UI) for Operations Support Portal

    1IM 8.1

    I enabled Compile HTML5 Applications options (QBM\HtmlDevelopment\Compiler). After I run compile HTML applications but compiling not finishing (API Server UI (Debug) step)

    Any ideas? 


  • Random Select mailbox database


    Can someone tell me a better way to select random mailbox database?

    We have our mailbox databases named to start with the location of the user.

    Location may by AU, US, or UK.


  • UNSAccountInUNSGroup attestations slow approvals


    I have a attestations policy with procedure on "User accounts: system entitlement assignments (UNSAccountInUNSGroup)".

    Some groups have thousands of users. When the attestation goes out and the user tries to approve more than 200 at a…

  • Connecting Azur AD through proxy.

    Hi All,

    I need help in below case.

    We are trying to connect Azure AD from server which don't have direct access to URLs. URL Access is enabled through proxy server.

    Firewall is enabled between job server and proxy server where URLs are whitelisted…

  • Too many redirects error with OpenID connect

    Hello ,

    We are integrating 1IM(8.1.3) with with Forgerock AM using Open Id connect . We are receiving the below error

    redirected you too many times.


    WE have two web servers behind a DNS.

    Please let me know if anyone have…

  • AttestationCase and ReducedApproverCalculation config parameter

    Hi All,

    I'm using Attestation functionality from OneIdentity v8.1 and I would like to recalculate approvers for open attestation cases when the employee's manager is being re-assign. Obviously employee's manager is a valid approver for the Attestation…

  • Customized page error after upgrade from 7.1.6 to 8.1.3


    Our OneIM on UAT environment just got upgraded from 7.1.6 to 8.1.3 with database upgraded via configuration wizard.

    Everything was fine except 3 customized web pages.

    The app server as well as web portal has been uninstalled and then re-installed…

  • How can I manually reset the state of a full sync job in the Sync Editor

    I had some issue with one synchronization project and it was failing for more than 15 days consecutively. I fixed the issue and ended all the sync jobs which were in frozen state in the job queue info (continue with error).

    However, new sync job was still…

  • DefaultSenderAddress (Display Name)DefaultSenderAddress (Display Name)


    Can someone tell me if there is a way to set a display name on the DefaultSenderAddress?

    Config Parameters: QER\Attestation\DefaultSenderAddress

    I tried using just powershell to send and it works.

    Send-MailMessage -smtpServer "smtp.test.com" -to…

  • Manually assigning an Azure AD group to an Employee


    I would like to assign members to a busness role and a Azure group to the same role, but nothing happens. When I try to do that manually I get the following error message:

    [810306] Error during execution of 'OnSaving' in logic module 'AAD.Customizer…

  • Differencies between One Identity Manager DB schema V6 and V8.

    Dear One Identity community,
    I'd like to know the differencies between One Identity Manager DB schema V6 and V8.
    Currently a reporting tool is directly connected the the V6 and I would like to know what's the gap to prepare the new requests. (No we…

  • Powershell Connector ListingCommand

    Is there any way to import objects using the Powershell connector with just the ListingCommand and not the full CommandSequence? The API I am connecting to have one command to list all data from all users and one command to list all data from a specific…

  • How to disable the read-only attribute from a field?

    Hi everyone!

    I try to migrate our code from version 7 to the new version 8 and I´m stopped with a Read-Only issue,

    Some products have defined questions catalog which must be answered by the user. These answers are save into a custom table (all…