Browse By Tags

  • Active assignment request

    We are facing the same issue 8.0.2 IT shop assignment is not working as expected basically it show for the requester that the product he requested is assigned   (E.x business roles/ other entitlement) user try to use requested product since approvals got…

  • Regarding one IDM upgradation

    Service Broker not enabled for this DB

    Team, we are in a progress of upgrading one IDM from 7.1 to 7.1.3 in test environment which is the replica of production environment.

    still in test env job queues are running and trying to connect production DB, and…

  • OAuth2.0 and API


    We're trying to get ServiceNow to run scripts in One IM and doing that with OAuth2.0. I've installed the RSTS but something is missing.

    1. I have enabled both OAuth2.0-authentication modules but do I need to configure a identity provider…

  • How to limit the approval of requests on the Web-portal

    So what we have:
    There is a multi-requested resource for IT-Shop
    There is a certain workflow for this resource.

    I expect that at the execution step, when you click on the reject button, a popup will appear.

    My logic is this: in the PWOHelperPWO…

  • Mail Template scripts


    1IM 8.1

    I need get XDateInserted from Department view in Mail Template. 

    I wrote script: 

    Public Function CCC_Department_Get_XDateInserted_1(ByVal dbDepartment As ISingleDbObject) As String
                Dim strLOGFileName = "C:\temp\logs\temp.txt…

  • Not Able to delete Outstanding Object from AADUser because of O3EmailUser table object reference IM 8.0.2

    I have created a Process which calls method 'DeleteOutstanding'   for some selected objects of AADuser table which are having Xmarkedfordeletion=2 (Outstanding).

    These objects also have a reference in O3EmailUser table. Not sure why but system throws…

  • History DB understanding


    I have 3 servers:

    1 - with Administrating utils for OneIM DB.

    2 - Database Server with OneIM Service and OneIM DB (Job Server)

    3 - Dedicated server for History DB Service and utils

    I installed 1IM History Database utils (Designer, HistoryDBManager…

  • Full AD synchronization getting failed, while Delta sync works fine.

    Hi , 

    I do not get any error while running Delta synchronization , while getting error on running full synchronization for AD target system.

    Error details are as below -

    ErrorMessages = (2019-10-23 16:36:32.500) [2134003] Error executing synchronization…

  • "Use transaction" as in-script variable

    When testing the script from Designer it is possible to set "Use transaction". Is it possible to somehow set "Use transaction" inside script i.e. Session.Variables.Put("UseTransaction", True)?

  • Unable to delink Employee Record from an old AD account

    Hi Gurus,

    Fairly new here so please be kind with my terminologies. In our OIM, we have HR Personnel information coming from Oracle eBusiness Suite (EBS)

    A certain personnel was turned from Contractor to Full time employee, and hence a new AD account was…

  • active directory group membership sync base on xOrigin


    Can anyone please help me out of the below requirement. 

    During the active directory group sync, I want to delete all the direct (Xorigin = 1) membership from 1IM if memberships are not present in AD however if memberships are indirect (xOrigin> 1)…

  • One Identity Named a Leader in the 2019 Gartner Magic Quadrant for Identity Governance and Administration

    • Recognized for its completeness of vision and ability to execute

    ALISO VIEJO, Calif. – OCTOBER 14, 2019 One Identity, a proven leader in identity management, today announced that it has for the second consecutive year been named a Leader…

  • Active Directory Authentication not working


    We are trying to setup AD authentication following the guide:

    But, we don't want to disable the anonymous Authentication.

    And It is…

  • Ad sync project scope/filter.


    i am trying to resolve an issue and i am wondering if some one have implemented anything like this before. 

    Requirement: add a new OU to IDM scope which had different user accounts and groups and only import specific accounts which match a condition…

  • Web Designer: Employees for whom a request can be placed

    i'm trying to customize the web portal in a way tha allows different groups of users to place requests on behalf of defined users. The SQL is getting a bit advanced and i'm trying to figure out how to do what I want. In the code below i'm using case-when…

  • Using variables in SoD checkin

    Imagine a scenario where you have AD controlling access to hundreds (this is the key word here) of applications meaning that a single AD group actually represents an entitlement in a specific application.

    Let's say that my current rules are  doing checks…

  • Create, download and save file from Web Portal

    Hi all

    My client wants me to add a button in the Web Portal to allow him to create a plain .txt report with certain data.

    Currently I’m trying to use a “Data Action” -> “Save File” control, that seems to me to be the right choice.…

  • Error generating process step Call Script VI_UnsAccount_Ident_UNSRoot_Event


    I wrote script for add user to Oracle Database. 

    I created process (Insert Event to UNSAccountB table) for create the user. 

    When I create user in Manager, I got error: 

    Got exception during generation of chain 'VI_UnsAccountB_Generic': Error generating…

  • IT Shop still showing "InActive" employees.

    Hello All,

    We are having a little issue with InActive employees still showing on Web portal for managers in their direct reports.  I have the parameter set  for "QER\ITShop\AutoCloseInactivePerson"... Is there anything else that i need to do to remove those…

  • Recommendations please...

    Hi everyone,

    Looking for good tutorials / documentation on provisioning / approvals. Training is on the horizon, but I need something to get me through the short term.



  • AD Sync based on group membership assignment

    Hi Experts

    I am trying to achieve some sync task however not sure what is the best solution. the task is - 

    If any group membership missing in AD however the membership present in IAM, during the sync the action should be 

    • If the membership in Identity…
  • Installing the Job service to a local server

    Hi there,

    I'm trying to get my job server installed as a service on my 1IM server. (Windows 2016)

    As this is a LAB environment, the service account and installation account are both Administrator. The Installation folder is the local folder with my…

  • Report Editor - Table Report Header Row


    I created a table report at one time and got a header row to only print on first page.

    You can define it in the properties of the cell to only print on first page.

    I'm now trying to create a new report with a table and cannot do the same for new…

  • Completed requests either do not show or show in Canceled Requests....

    Hello All,

    when a person requests something on IT Shop, if the request was approved and completed it doesn't show in Approved request under request history for that person... There are times it won't show those requests at all or they will end up in…

  • VI_ESS_PWOHelperPWO Send mail new task for approver Failing

    Hello All,

    i have a few jobs under VI_ESS_PWOHelperPWO Send mail new task for approver that are failing to send the email notification.  Below is the error i am getting.

    ErrorMessages = (2019-08-21 14:59:05.247) [810271] Column UID_PersonOrdered does not…