Browse By Tags

  • Create overview of all Policies applying to OU

    Hi,

    I often receive a question from the business about "what policies are in effect when we create a user"; currently I always have to dig in and manually write what happens (mailbox, homedrive, attributes, auto groups etc). Is there an easy way to just…

  • Provisionning AD Error: [1777004]

    Hello all, 

    I'm facing an issue and I tried many different ways to solve this, but the problème still exists. 

    The problem is: after creating a user from the web portal, the user is created, get the AD account by the AccountDef and all things…

  • Error while assigning SAP roles to the user

    I am getting the below error while trying to assign SAP roles to the user from synchronisation editor. Could someone please suggest am I getting this?

    The system.exception says Bitte ein Initialkennwort angebenwhich which translates to "Please enter an…

  • Need clarity | Creating UNSAccountB from account definition on employee creation

    Hi fellow experts,

    I hope everyone is save and healthy.

    I've configured an account definition for a custom target system and mapped it with a business role (assigned using a dynamic rule). So the creation of UNSAccountB is happening and using the generic…

  • How does AccountInGroup Ad-Hoc Provisioning work? => how to update multi-valued attrib on account not group

    Can someone please explain to me how AdHoc Provisioning works for Account-Group Memberships?  I can’t find any documentation on this anywhere … aside from discussions about XDateSubItem on the “hosting” object.

    With an ‘ordinary…

  • Welcome to My World – How to Easily Handle a Sudden Storm of Active Directory Provisioning Tasks

    This current global health crisis has created chaos and hardship for individuals, families, companies and governments. With events canceled or postponed, offices closed and personal routines put on hold, life as we previously knew it, quickly changed…

  • SAP User object ignored during synchronization because object has M:N provisioning tasks

    Dear fellow experts,

    Trust you are safe and healthy.

    I've configured a SAP CUA synchronization project which is configured to be in read-only (both in the intial Base Administration template configuration and target system configuration) so the data…

  • Bouncing Back from Forced Change – the Active Directory Angle

    As you know, recent events forced nearly every organization in the world to quickly adjust the status of its workforce. Whether it was to transition office-based workers to remote access, to temporarily furlough employees with the intent to bring them…

  • Campus identity management - a challenge like no other

    In higher education today, students, faculty and staff must have ready access to the information, applications and systems from anywhere and at any time to efficiently study and to do their jobs. These populations are relatively well-known entities that…

  • Recommendations please...

    Hi everyone,

    Looking for good tutorials / documentation on provisioning / approvals. Training is on the horizon, but I need something to get me through the short term.

    Thanks!

    Matt

  • Creating a new One IM Database via the command Line

    Hi,

        Hoping a quick question, How do you create a new database via the Cli?

    I'm trying to replicate the functions of the ConfigWizard "Create and install database function/feature within a deployment script. I've found information that points…

  • Provisioning an unexpected value in attribute Mail of AD

    Hello experts,

     

    1IM is provisioning the “Mail” attribute of some AD accounts as blank (“”) when this should be Person.CCC_email and we cannot explain why this is happening despite Person.CCC_email being always filled.

    We have…

  • SAP Client provisioning, if the client is not available because cloud system is down to reduce costs

     Hello,

    in our environment we have connected every SAP client (more than 300) to our IAM system, so Prod, QS and Development.

    Now more and more systems will be shifted to cloud environments, where during the night or if they are not needed for a specific…

  • Is there a way to Limit OneIM to use only Child Domain for GC Query instead of Parent?

    Hello Experts,

    We have been having a weird issue with our OneIM version 8.0.1.  We have multiple domains and 2 of the 3 domains are working with no errors.  One of the Domain we have is having all kinds of issues.  The difference is the 2 working domains…

  • Hybrid Exchange 2016 and One Identity Manager (8.0.2)

    Hello.

    Need to get hold of anyone who have fixed implementing One Identity with a hybrid Exchange Environment, because I'm struggling mightily with this.

    Since Exchange "converts" the local mailbox to a remote mailbox after the migration to Exchange…

  • ADS_ADSGroup_Insert Job frozen but AD Object was created

    Hello Experts,

    We have a mystery that i'd like to get some help with.  We have multiple Jobs that are either ADS_ADSGroup_Insert, ADS_ADSAccount_Insert and they are frozen but the AD Object was created in AD.  You are able to able to provision to this…

  • Active Directory Provisionning

    Hello Everyone, 

    Thanks in advance for your answers.

    I have a problem with the AD Provisionning (Target Synchronization).

    I don't know how to create a kind of CheckBox on "Create User Account" Form via Manager Application (also via Web Portal…

  • SAP Connector: set the "valid from" date

    We are using One Identity 8.0.1 and the SAP Connector

    We are starting to provision SAP roles to SAP ECC.

    By default, the field "Valid from" of the assigned role in ECC is set by One Identity to 01-01-1900 while we need to set it to the date of…

  • AD group membership not being applied to the target

    AD group membership when assigned directly, or through inheritance, is not assigned to the actual AD.

    In some cases, even the membership can be seen for the ADSAccount object, but it is not seen in AD.

    However, any changes to an AD account is immediately…

  • Okta User Generation - Not Seen as Creation

    We've got Okta provisioning users, soon to be from Workday, through Okta, and then into AR. However, the issue that I'm running into is that when a user is created in Okta that then is replicated to ARS, ARS isn't seeing it as a new user creation. Because…

  • Generating central user account after provisioning

    Hi, all.

    Can you help us? We have got one small problem in our project. After provisioning several employees from MySQL database into IDM 8.0.1 their fields "central user account" in Manager are empty, but for example when we create a new employee in…

  • Solving the initial password dilemma

    Many times companies use an initial password that is partially or completely static (Summer2017?), or sometimes they use a formula which includes partial data of the user such as the month of birth + the three final digits of their Social Security, etc…

  • DASA, one of the largest laboratories in the world, secures identity and access processes

    Diagnostic medicine can be defined as the bridge that connects the research and development of diagnostic tests to their application in medical practice. DASA is the largest provider of diagnostic medical services in Latin America, and the fourth largest…

  • Gartner Analyst Covers All Things Security, Risk and Governance


    Determining the true reach of a security incident can be daunting. A breach can cost your organization money, customers and most importantly, trust. Organizations must provide more access to more people from more places to more things—everyday. Organizations…

  • The Forrester Wave™: Identity Management And Governance, Q2 2016 One Identity Manager positioned as a Leader

    See why One Identity Manager is positioned as a Leader in The Forrester Wave™: Identity Management and Governance (IMG), Q2 2016.

    The independent research firm uses a 17-criteria evaluation of identity management and governance providers to identify…