Browse By Tags

  • Exchange user rights


    As we are about to manage Exchange users and all sort of Mailboxes I would like to check how can I get information about different rights users have on the mailbox like:

    • Send on Behalf (this is seen in the system - table EX0MailBoxSendOnBehalfPerm…
  • Convert epoch time in Sync editor


    I would like to get data about Expiry date from AD - parameter msDS-UserPasswordExpiryTimeComputed

    As I checked it is the same forma as AccountExpires parameter.

    Where I do not find solution is how can I create vrt property to transfer this number to…

  • OneIM DB Migration and Restore - Compile DB Error


    We are running OneIM 8.1.3 and are in the process of having to migrate our current production DB to a different server.  We followed the standard guide on how to backup, restore DB, manually replicated the user permissions on new server, etc...and…

  • Access of shared member, constant member, enum member or nested type through an instance


    I'm trying to insert a value on AADUser.OnPremImmutableId and I get this error:

    WARNING: Access of shared member, constant member, enum member or nested type through an instance; qualifying expression will not be evaluated., Script: Tmpl_AADUser_OnPremImmutableId…

  • Employee with 2 account definition - access to IT SHOP

    Good evening to everyone,

    I have a question and I would like to understand if it's possible to do it or not.

    I have multiple employees  with two account definition : ad account and adm ad account,

    I would like to log in IT SHOP with employee credentials…

  • Documentation for Integration process and User Provisioning with Cloud Apps?

    Hello All,

    Does anyone know of any official and/or unofficial documentation that provides overview on how to integrate a cloud app (finance apps, etc.) with 1IM for user provisioning and deprovisioning?  Seems the current documentation for 8.x is currently…

  • ObjectGUID in 1IM not update after provisionning to Target System


    1IM 8.1

    I created Sync Project Native database connector to PostgreSQL DB.

    I created mappings 1IM <-> PostgreSQL.

    Roles created in PostgreSQL correct. But ObjectGUID in 1IM UNSAccountB not update after provisionning.

    Force mapping against…

  • Requests on behalf of other

    Hi everybody,

    I know that OneIM provides the possibility to make requests from ITShop on behalf of others; in particular I know that a manager can make requests on behalf of his direct subordinates whether he is their direct manager or he is the manager…

  • VB reference manual

    Hi experts,

    I want to change some pre-scripts on some "process". But, there are many functions that I don't know, such as "Connection.Getsingleproperty()", "Pers.CallFunction()", etc. Is there any VB Reference Manual for those functions?…

  • How to change email notification fuction in "Designer"?

    Hi experts,

    I want to implement an email notification function in IAM.

    Here is the situation:
    when somebody makes a request, both A and B will receive that request. And the only condition to approve this request is both A and B agree to the request. But…

  • Azure AD module installation


    We are trying to install Azure AD module in one of our instances. Before the installation it asks for jobqueue and dbqueue tables to be empty.

    How could we make sure that all existing tasks and jobs get processed and nothing new gets triggered before…

  • Error "An existing connection was forcibly closed by the remote host" when importing personal data from SAP/HCM

    In our test environment, we observe the following error message 1 to 2 times a month in connection with the import of personal data from SAP/HCM:

    ErrorMessages (2021-03-16 02:51:55.197) [810222] Error executing script 'CCC_Import_IDM_Person_IDV_SAPHCM…

  • How to call auto generated Composition API methods by HTML Client with/without search parameter


    it seems like compiling the Composition API and creating the HTML Client can be different based on the environment:

    1) local (dev) => Composition API methods created with HandleGetByQuery do not have a "search" parameter in the Client, hence you…

  • Use case and technical feasibility to integration current enterprise One Identity manager to external enterprise One Identity manager

    Use case and technical feasibility  to integration current enterprise One Identity manager to external enterprise One Identity manager ?

    Requirement – manage the cross organisation workforce using IGA to IGA integration.

  • One Identity Failing to abort expired requests

    We are seeing expired requests (ValidUntil < current date) in the PersonWantsOrg table that are not being aborted by the db queue. We found that this is working as expected in our development environment but not in our staging (QA) environment. We attempted…

  • AD Provisioning fails with: Unable to execute method (Insert object) for object (Xxxx) because not all mandatory properties are defined.

    My AD Account Provisioning has stopped working.  It always fails with the error "not all mandatory properties are defined".  It is complaining about "cn, objectClass, sAMAccountName".

    To eliminate moving parts, I go to the Sync Editor…

  • How is the DeactivationStart field filled?

    We are using version 8.1.3. We saw that some of the new users had their DeactivationStart field filled. The process (VI_Person_Deactive_ExitDate_Expired) considers this field. The process updates the IsTemporaryDeactivated field from False to True according…

  • How can I login IAM Modules with an user who has a specific Active Directory Security Group?


    I tried to use "Active Directory  User Account (manuel input)" Method and users can login Modules successfully with their AD accounts. But our customer asked me that how can we control the users' permissions? We don't want every AD users can…

  • Integration with ServiceDesk (BPM Online) How to reopen PwO ?

    at the moment I am integrating with the BPM Online service desk system: the user orders access through the It shop, then using Rest-api OneIM (version 8.1.2) creating tickets in BPM , requests and receives statuses. Based on this, OneIM made decision…

  • ITShop Person Changes Saving as SA in One Identity Manager 7.1

    When our ITShop saves changes to person XUserUpdated in the Person table is recorded as "sa". ITshop is configured for Active Directory. Where/What do we need to change to have ITShop record the changes as being performed by the ITShop logged in AD user…

  • Disaster recovery for One Identity manager Product


    Please help me to find out how to set the Disaster recovery for One Identity manager Product. I couldn't able to get the information in the One IM documentation.

    Any help would be appreciated.



  • Execute plain SQL in script


    is it possible to execute sql in a script like asked four years ago in thread [1] in OI version 8.1.4?

    I testet the script in version 8.1.4 .and i get the error message in [2].

    That means, the code fails to execute:

    Dim conData As ConnectData = DbApp…

  • Permanently removing test employees from development system

    In our development system we have a lot of test employees, which we would like to permanently remove in order to tidy up the environement.

    The employees have business roles assigned, which will need to go as well.

    I just want to make sure we do this in…

  • One identity manager DB back Restore

    Hello everyone, I just had an experience of unsuccessful upgrade from 8.0.2 to 8.0.5 in the Dev Environment (faced issues in DB compilation after the upgrade and other issues).

    Now I want to roll back, and I will restore backup which I took before the…

  • Potential SQL injection attack by brute-force on WebPortal - Attestation - Business role attestation


    I am getting sql injection error on WebPortal while trying to perform attestation for a business roles.

    I am using version 8.1.1

    WebApp log:

    Module instance created: ATT_Attestation_MyAttestations
    2020-12-16 15:15:12.3358  INFO (    WebLog s0xjgi1ydmrf0vz3qcopxvxx…