• Provisioning of EBS HR Person

    Hi everyone,

    I'm working on a requirement where we need to create HR person records in Oracle EBS. The system setup requires a user account to be linked to an employee in order to access various screens. As part of this process, we need to:

    1. Create…
  • Remove default IT SHOP items

    Hello,

    We need to modify IT SHOP and we need to hide some items that are present by default in the request screen. We tried to delete the various items, however it gives us the following error: "You are not allowed to remove default objects or assignments…

  • Salesforce permission sets are getting removed from the user

    Hello, we are recently live with One Identity Manager and Salesforce integration. But, now we are observing that One Identity Manager is revoking the permission sets from the user and we are unsure of the reason. Can someone please urgently help with…

  • Only allow a single role assignment per class

    Hi,

    we would like to have a way to restrict departments to a single business role or eset per class.
    But inheritance should work as expected, unless there is a more specific assignment.
    We have about 6000 departments and the tree is about 10 levels deep…

  • unsubscribe old associations

    Hi.

    The customer is doing a version upgrade (9.1-->9.2.1) and with the new portal he asked me if it is possible to remove associations from the past (made before the integration), I will add an example:

    Given a person's manger, that manger can remove…

  • Business role module on workstation

    Hello, I'm not able to see the business roles module in my lab installation. I have installed the module by using the configuration wizard, but I cannot see the module in the installation procedure for the clients. Ho I can add the module to the product…

  • How to update company logo in Signature section of Email templates

    Hi,

    We are trying to add a company logo to the out of the box available email notifications. We tried adding the html tag (of the image) in the signature component of Designer [ Designer --> Basic Data --> Configuration Params --> Common --> Mail Notification…

  • Users not visible in Starling project

    I have created a starling project to integrate Salesforce. When I browse the Target system, I am able to see the roles, profiles, permission sets and groups. However, In 'users', the records can be seen under the list but when I click on any particular…

  • Manage Web Portal

    Hello,

    I want to add in my user web portal a menu to manage my profile.

    Can you help me to do yhis please

  • Is it possible to add company logo to the out of the box email notifications

    Hi,

    We are trying to add a logo to the out of the box available email notifications. We tried adding the html tag (of the image) in the signature component of Designer [ Designer --> Basic Data --> Configuration Params --> Common --> Mail Notification…

  • Identity Audit - SoD for multiple roles

    Hi, 

    i got the challenge, that we´re trying to implement a SoD-model where the identity inherits a SoD-tag (extended attribute) from it´s department.

    Now every systemrole we use also has a SoD-tag (extended attribute) assigned. I now need a…

  • TSB_PersonHasTSBAccountDef_Autodelete_Account - Azure Account

    Hi Team,

    I am trying to delete Azure Account which is assigned to account def using some defined condition set in dynamic role.

    I have created a business role and created dynamic role and then assigned azure account def to role.

    when user gets deleted…

  • Change the Display pattern of AD-Groups

    Hey guys,

    How can I change the display pattern of the result list of AD groups when I try to assign a group to an AD user?

    Right now it shows the display names of the groups, but I want to change it to the CN.

    I am talking about the interface where…

  • Processes in series

    Hello everyone,

    I would like to set the execution of a process to run in series rather than in parallel as it currently does by default.
    Is that possible?

    I'm using One Identity Manager 9.2 on demand.

    Thank you,
    Elena

  • Unable to assign permission sets in Salesforce using SCIM connector

    Hello Experts,

    We are working on version 9.0 LTS and we are trying to assign permission sets using UCIGroup3 (system entitlemnets 3 ) table. UCI_UCIGroup3_Update job is getting completed but permission set is not getting assigned. IsGroup3 column is set…

  • sendrichmail failing

    Hi Team,

    Send rich mail failing for the last 2 days with below error message.

    Can anyone suggest here how to fix the error?

    ErrorMessages (2024-11-18 04:36:52.413) UseDefaultCredentials is not supported anymore.
    [System.Net.Sockets.SocketException] No connection…

  • security mechanisms are available for Remote job server?

    How Remote job server data can be secured/hardened apart from OS security and if there are any mechanisms that can be configured to achieve a high level of security such as encryption of data, access controls for jobs, data timestamps/checksums.

    Please…

  • Active Directory - managing disabled accounts

    Hi.

    I'd like to ask for a recommendation for a scenario where there are two AD domains and in one of the domains all accounts should be managed in disabled state.

    Accounts from one domain are managed in a default way so when an identity is terminated…

  • Custom Shopping Cart Checks

    Hi All,

    We are having an issue with the Shopping Cart checks for One Identity Manager OnDemand v. 9.2.1.

    We implemented and activated the compliance rules on SAP authoritative objects and now, when we perform a request for SAP Roles from the IT Shop…

  • Manage Entra roles and pim groups

    Hi 

    Is there and way to manage group and roles with eligible users in One IM 9.2

    Thanks 

    Magnus 

  • Inactivity timeout in angular portal

    is there any feature available in the Angular portal that will terminate a user's session if they are inactive for a certain period of time, requiring them to log in again to access the portal? not session timeout, inactivity timeout i meant.

    • inactivity…
  • The RPC Server is Unavailable

    We get this error while provisioning an AD User on Target System.  User was able to created with no password. You can see the error details below link. We are getting some password policy requeriment error in the logs even we have tried to give manualy…

  • Load collection distinct()

    I am trying to load a collection using IEntitySource.GetCollection method. I need to have distinct values in this collection so I am trying to use Distinct() method after loading the collection. However, the next method should use an IEntityCollection…

  • How to Enable Passcode Generation for All Identities in Angular Web Portal as a Session User

    In the current out-of-the-box feature, a user can only generate passcodes for their subordinates/direct reportes. For example, in the Angular dashboard, under the "My Responsibilities" tile, it lists:

    • User 1
    • User 2

    As a user, I can generate…

  • Select with distinct in api collection

    I am trying to load a collection using IEntitySource.GetCollection method. I need to have distinct values in this collection so I am trying to use Distinct() method after loading the collection. However, the next method should use an IEntityCollection…