• Configuring SendAs-Permissions for security groups through a process step with powershell

    Hello everyone, 


    we are currently trying to find a way to configure Send-As-permissions with Identity Manager. The problem is that there seems to be no integrated functionality to give an AD security group the send-as-permission, which would make it more…

  • Reset an Attestation Case

    Hi all,

    I need to reset an attestation case in Aborted state.

    Is one time shot I need to reset a bunch of attestation went in Aborted state. I can't create a new one should be the same attestation.

    I can't find the process or the sql procedure that…

  • Account Definition Creation & IT Operating Data

    Hi,
    While creating and before assigning Account Definitions, I have created the mappings for the following attributes:

    1. ADSAccount - IsGroupAccount

    2. ADSAccount - UID_ADSContainer

    For the attributes
    3) ADSAccount - UID_HomeServer and
    4) ADSAccount - UID_ProfileServer…

  • Difference between the Entra ID connector from Starling and the Entra ID connector from One Identity Manager (on-premise)

    Hi everyone,

    I'm working with One Identity Manager and noticed that there are two different connectors for Entra ID (formerly Azure AD):

    • The Entra ID connector available through Starling Connect
    • The Entra ID connector included in the on-premises
  • Custom task blocks the JobQueue processing

    Hello group!

    Note: OneIM version: 9.3, the issue only appears in the Fat Manager client.

    We have developed a custom task that is shown only for deactivated external identities and inside the MethodScript field, there is a call to a sub (CCC_Reactivate_Identity…

  • Report Subscription section not visible from the portal

    Hi all,

    We are using One Identity Manager OnDemand version 9.3.1.
    We customised the api portal but after the deploy the page Report Subscription (under Profile > Profile > Report Subscription) disappeared. We didn't customize that page nor the RPS module…

  • Automate adding objects to a change label

    Hi,

    I'm looking for a way to automate adding objects to a change label.

    Currently I have automated the creation of objects through SQL (HOInsert, etc) but I also want to add these objects to a change label automatically instead of going to change…

  • SendRichEmail Error (Server supported authentication mechanisms: GSSAPI, NTLM, LOGIN)

    Hey guys,

    So when I try to run a process to send an email notification I get this error:

    Server supported authentication mechanisms: GSSAPI, NTLM, LOGIN

    [MailKit.Security.AuthenticationException] 535: 5.7.3 Authentication unsuccessful [MailKit.Net.Smtp…

  • Attestation Collection - Access review details

    Hi Team

    I have enabled collection emails from "QER\Attestation\MailTemplateIdents\RequestApproverByCollection". Additionally, I want to add more pending attestation details in the same email, such as the Attestation case, due date, created date, and count…

  • Revoke VM access

    I completed my One Identity manager training. Thank you for giving the VM access. You can now revoke the VM access of One Identity Manager.

  • Report on source of entitlement

    In the web portal and in manager it is possible to determine the source of an entitlement assigned to a person. (e.g. whether the entitlement was assigned by request, via inheritance from another role, etc)

    Is there a way, either via report or via SQL…

  • Angular Web Portal Deployment Strategy - Transport Packages vs. Environment-specific Builds

    Hello,

    I am looking for help on the best deployment approach for our customized AngularWebPortal across multiple environments.

    Current Setup:

    • 3 environments: Production, Test, and Development (all running version 9.3.1)
    • Each environment has different…
  • We are using OIM 8.1, for a custom attribute CCC_EBSDept we need to increase the size (length) as the character of department are more than the current permissible length

    For the custom attribute CCC_EBSDept, we need to increase the size (length) from 64 to 256. I tried to do it directly from the SQL DB as I got one article on KB, but the length is showing upgraded on the SQL, but it is not reflecting on the OIM Designer…

  • Frozen Job when Transporting to a new HistoryDB (9.2)

    We have installed a new History Database in our environment and let the first Transport start with the AutoSchedule.
    Before this HistoryDB, we had a HistoryDB that was installed but never used on v8.2.

    When the Job autostarts, it throws the following…

  • how to change the primary smtp address from upn to another value for entra users?

    Hello,

    We are currently in a project to use the M365 services.
    The use case or question specifically concerns EntraID and Exchange Online.
    In the Microsoft cosmos you get the UPN (UserPrincipalName) and this is usually also the primary SMTP address .
    However…

  • Unable to create base objects in UCI connector.

    Hi Experts,

    We are encountered with error BC30002: Type 'UCIRootSelectPage' is not defined while creating base objects in UCI connector on Sync Editor. 

    Target connection & One Identity Manager connection are successfully connected. 

    Please pour…

  • Doubts on filtering condition in synchronization editor

    Dear Everyone,

    We are currently syncing attributes from a target system to One Identity Manager using the Sync Editor. So far, we have applied System Filter conditions to load the particular data such as:

    • Person ID is not null

    • Employee number starts…

  • IDAM delete the entry in UNSAccountBInUNSGroupB before completing the custom process

    I have integrated a target system that provides a unique ID when a role is assigned to a user. I have saved this unique ID in the UNSAccountBInUnsGroupB table in a new custom column. This unique ID is mandatory when a user unsubscribes from the request…

  • Error at POST: An error occurred while deserializing the request into the target type

    Good day, can someone please help?
    I’m new to the Composition API Club.
    Right now, I am trying to create a POST endpoint:

    public class ModulData
    {
    public string MName { get; set; }
    public string DE { get; set; }
    public string SName { get; set; }
    }

  • Sequence contains no matching element" error when opening synchronization project

    Hi,

    I'm encountering an issue when trying to open a synchronization project in the Synchronization Editor (version 9.3).

    As soon as I attempt to load the project, the editor fails with the following error in the log:

    System.InvalidOperationException…

  • Custom theme on One Identity Manager 9.3 Web Portal stops working after first load

    Hi everyone,

    I'm running into a strange issue while trying to apply a custom theme to the One Identity Manager 9.3 Web Portal. Here's the step-by-step I followed:

    1. Cloned the official Angular portal project from One Identity’s GitHub.
    2. Modified…
  • Issue with Schema Extension Before and After CU 4 Update

    Issue with Schema Extension Before and After CU 4 Update

    Version 9.0.04 LTS

    Initial Situation (Before CU 4 Update):

    • The schema extension had already been applied.
    • When attempting to change a column field from False to True, the following error message appeared…
  • One identity Manager integration with Safeguard

    Hello everyone,

    I integrated One Identity Manager 9.3 with Safeguard 8.0. When I try to request from IT Shop Pam Access Request (Password Request), There is no PAM Asset and no PAM Asset Account. Although in Manager under PAG module there is 2 PAM Assets…

  • Recalculate single Attestation Case on Event (Identity Manager 9.2)

    Hi,

    I have a question and hope you can help here.
    We have an Attestation Workflow with custom approval methods. When an Identity is temporarily deactivated I want to recalculate the corresponding Attestation Case (or bettter: just this approval step). 

  • How to trigger user account created emails by getting acknowledgement from target end(salesforce)?

    Currently email is triggered from CSMUser table once account is created in One IM end without checking in target end. We want to configure and send emails only after checking at target end.