• Unable to Remove UNS Groups and Roles from UNSAccountB after Request Approval in Identity Manager v9.2

    Hello,
    I have integrated the UNS system using a custom REST API script on One Identity Manager v9.2.

    • User objects are added to the UNSAccountB table.

    • Group objects are added to the UNSGroupB table.

    • Role objects are added to the UNSGroupB1 table…

  • Adding multiple custom target systems

    We have a requirement to have multiple custom target systems. Syncing data from the first one works fine and data is added from target system to UNSAccountB, UNSGroupB and UNSAccountHasUNSGroupB tables.

    However when we start syncing the next one, the…

  • How to have different deferred deletions durations for different UNSAccountB Types

    Hello, 


    Using 8.2.0 on OnDemand environment.

    We have to different custom target systems let's say A and B. For each of those target systems we have an account definition. And users get the UNSAccountB via dynamic roles. 

    When a user becomesInactive (ie…

  • Adding Custom Target Systems

    Hello everyone,

    After connecting with lot's of custom target systems, I started to have problems with the UNSAccountB table, I had to extend the table for each target system...

    I was trying to create a table for each custom target system, like ADS…

  • Mapping Key Resolution from UNSaccountB to UNSGroupB to get ObjectGUID

    Hi.

    I've made a connector which only works with the Users class.
    The UNSGroup assigned in One Identity has an ObjectGUID, which I have to map when inserting av new user from One Identity to the target system.
    Please note that the groups on the target…

  • Disabling a fully managed account without disabling the Person

    Hi everyone,

    I just came across a scenario where I have a person with accounts on many custom target systems (UNSAccountB). All accounts are fully managed accounts (they inherit accountdisabled check from Person). Now there is a requirement to disable…

  • Need clarity | Creating UNSAccountB from account definition on employee creation

    Hi fellow experts,

    I hope everyone is save and healthy.

    I've configured an account definition for a custom target system and mapped it with a business role (assigned using a dynamic rule). So the creation of UNSAccountB is happening and using the generic…

  • SEARCH AND CREATE for ADS and UNS and understanding of account definitions

    Hi All,

    Please correct me if I'm wrong, that I understand that account definitions are the ones that triggers the creation of ADSAccount when a new Person is created. 

    Likewise when a Person has an ADSAccount already linked, any updates like change…

  • UNSRootB Base Object is not working as expected with different Sync Projects

    Hi there,

    I have different projects using different connectors (Powershell, Native Database) to pull accounts from different Target Systems, those accounts are mapped to UNSAccountB and every project has their own Base Object and Variables.

    So my goal…

  • UNSAccountB process is not firing for INSERT events for Provisioning using Powershell Connector

    Hi,

    I want to Create Active Directory Accounts using the Powershell Connector with the OOB AD Sample.xml definition file in my Sync Editor Project.

    Right now I'm able to execute the Full Sync, so the AD Accounts are under UNSAccountB but I can't Provisioning…

  • UNSAccountB: Write permission denied for value "UID_Person"

     Hi,

    I have a process that tries to disconnect unsaccountB account from the person object. The process fails and the error is :

    [810025] UNSAccountB: Write permission denied for value "UID_Person".

    How can I grant the necessary permissions to…

  • Want to view the OOTB UNS AccountB attestation reports in Web Portal

    I want to view the OOTB UNSAccountB and entitlement attestation reports in Web Portal. Can someone please suggest on how I can view and run the OOTB attestation reports in the Web Portal? I am on D1IM Version 7.0

    DONE