Browse By Tags

  • Change password at next login - GapUser

    Hello everyone! 

    Can you please tell me why when there are some updates in the employee's card that we receive from 1C for him,
    he is automatically ticked to change the password for his Google account?
    I found the following script in the GapUser table…
  • Synchronization Editor: Test connection failure after import sync project


    1IM 8.1 (2019-01-21-108).

    I have imported Native Database sync project to PostgreSQL database (via .projshell file)

    When I click Test button (In Target System) for check connection to the PostgreSQL database see error: "Data source name not found…

  • Unix Connector by certificate

    Hi, is it possible to create synchronization project with unix system by using user certificate instead of password?

  • Implementation of an Emergency Leaver functionality


    does anybody has experience and rubust approach for the implementation of an Emergency Leaver functionality? As far as I could find out, there is no OOTB function available.

    Before creating custom attributes and processes etc. maybe someone has an…

  • Employee Manager Role for only Active Employees

    Hello Experts,

    I have been trying to figure out a way to assign the Employee Manager role in OneIM to only those who have active persons listed as their direct report.  Currently if a person has an inactive employee listed it still assigns the employee…

  • Create ADSContainer from Departments automatically

    Is it possible to create missing ADSContainers from Departments structure automatically?

  • Docker job server SAPR3

    Hello, can docker job service sync with SAP r3 system?

    Server role and function(SAP) are added in designer and docker job server restarted

    Now its an error :

    Error connecting system (SAP R/3 Connector)!
    [System.TypeLoadException] Could not load type of…

  • How to set custom distinguishedname in ADSAccount table

    Value of field distingushedname in designer is locked from change in ADSAccount table

    Now AD accounts created by Account definition and looks like  :  CN=John Doe,OU=OUname,DC=domain,DC=com

    I need add departments containers to the distinguishedname : CN=John…

  • Attribute modification approval


    Is there any option to start an approval process for an attribute modification? We want to trigger it when a manager wants to modify the exit date of a person in the web portal.




  • Report for historical assignments and table UNSAccountInUNSGroup

    The standard report VI_Person_Overview_With_History show amongst other things historical assignments of UNSAccounts ang UNSGroups, with name of UNSGroup and assigned from and assigned until time, using CreationTime and DeletionTime. I would also like…

  • List of Users for UNSGroup (AD Domain Admins) and Report

    Hello - We're trying to find an OOB report or potentially create one that simply reports and lists all the current members of a specific UNSGroup.  To start, we're looking at our AD Domain Admins group and want to be able to create a PDF report to…

  • Frozen jobs: "Created by QBMDBQueueProcess: call method Replace for object type personwantsorg"


    We get, from time-to-time frozen jobs, that I cannot find out the reason for why.

    Is there anyone here, that knows what this means and pherhaps why?

    Here are some examples from the log file from today (I have removed the product and person name):

  • Assign account definitions in bulk


    I have an account definition that is not used for all and assigned only when needed. When we get the request for the assignments it may come in bulks. Does anyone know of a way to assign them in bulk through manager? I cannot see a way and don…

  • SAP lock unlock account Uflag 64

    I am having a problem in performing a lock / unlock of a SAP account to which an account definition is assigned, in particular if I try to insert a code uflag 64 (Administrative lock) or 0 (unlock). This also happens with the tool Manager, by…
  • One Identity 7.1 PersonWantsOrg - Person is not authorized to make requests at this point

    I have had this problem long ago using the API however the old forums posts are not helpful.

    Currently, in a mostly fresh install of One Identity 7.1 if I try to create a PersonWantsOrg request using Object Browser (logged in as viadmin) I get "This employee…

  • Membership in PostgreSQL role


    1IM 8.1

    I created Native Database Connection (ADO.Net) for PostgreSQL DB. 

    I created mappings UNSAccountB <-> pg_user view in PostgreSQL, UNSGroupB <-> pg_group view in PostgreSQL. 

    Create and removing groups and users in PostgreSQL works…

  • Custom Authentication Module


    I have following use case:

    * allow the employee authentication to api designer project

    * do not allow employee authentication anywhere else

    I am using Identity Manager version 8.1.4

    With current configuration of the authentication modules I…

  • Identity Manager Reset Password Portal and API

    I´m trying to understand and use the One Identity Manager Reset Password and after install the web portal, I can´t find the script CreatePassCode, I believe that this script are used to reset the passcode in the web api.

    Someone knows how…

  • Service stopped error: VIEW SERVER STATE permission was denied

    Hi all,

    processing today suddenly stopped working.

    IAM version: 8.1.1

    SQL version: Microsoft SQL Server 2016 (SP2-CU16) (KB5000645) - 13.0.5882.1 (X64) 

    The error in job queue is:

    2021-03-17 10:58:08 +03:00 - Serious: Last process step request failed with…

  • Identity Manager IT SHOP integrated with REST API

    How can I create a product request in Identity Manager IT Shop using the REST API?

    I realy need to insert in all tables that are related with ITShop cart and PWO?

    Anyone has a script that help me to find a way to solve this problem?

  • Error "An existing connection was forcibly closed by the remote host" when importing personal data from SAP/HCM

    In our test environment, we observe the following error message 1 to 2 times a month in connection with the import of personal data from SAP/HCM:

    ErrorMessages (2021-03-16 02:51:55.197) [810222] Error executing script 'CCC_Import_IDM_Person_IDV_SAPHCM…

  • can't save database caustom log in catch region of a try catch

    Hi all,
    I have a strange problem. Probably there is a reason but I cannot get it. 
    I was asked by my client to develop a custom logger to database. It should be very simple and it is very simple.
    I also created the table CCC_Logs to store the records.

  • Restrict property to be read-only


    Can someone tell me if a script can be used to restrict property to be read only for my profile? v8.1.3

    We have a need to ensure that internal employees don't edit certain things since most data comes from HR.

    External users should be able to…

  • Is it possible to add additional product into shopping cart as 1st approver

    Hello all,

    we got a requirement to enable the first approver of the "Request Access" workflow to not only accept or deny requested products (which works) but also to be able to add additional products in an created shopping cart.

    Maybe somebody…

  • Pending attestations mit delegation

    Hello to all, 

    i hope you can help to undetstand how this works.

    I (person A) delegate the role "Manger of person" from Person X to another person B.

    After this, an attestation process runs and both persons (A and B) gets the pending attestations…