26 docs tagged with "Extensions"

Configuration and example

This extension adds additional resource assignments for resources that are referred by the contexts in which an identity is. You can use the concept together with the assignment policies or as an alternative to the assignment policies.

The extension creates CRAs with the reason Review OK if the identity has CRAs that have been approved in a verdict survey.

The extension resolves and assigns the value(s) for assignment attributes based on configured data object reference paths and dynamic expressions. You can configure it with a number of attributes and corresponding reference paths or dynamic expressions.

The extension disables all calculated assignments for an identity if the identity has no primary context. More specifically, if the identity has a primary context type specified, but is not a member of the context, all assignments are disabled.

The CalculationAffectingEventsResolver extension is responsible for queuing identities for calculation when an event occurs in the Omada Identity as described in the Event-based queuing section.

You can use the ComplianceStatusCalculator extension to calculate a Compliance status for each CRA. The compliance status is assigned to the attribute called ComplianceStatus.

You can apply the ConditionalInheritanceEvaluator extension to implement Conditional inheritance in, for example, SAP scenarios. The goal of conditional inheritance is that a child resource is only assigned to an identity if it has the same attribute as the identity (either inherited from the identity object or one of its context assignments).

The extension is part of the Separation of Duties feature in Omada Identity.

This extension computes the default account names for an identity. An identity can have a default account name per account resource defined in Omada Identity. A default account name is calculated using the account name format specified in the resource type.

The extension is part of the Delegate access feature in Omada Identity.

The purpose of the Differentiator RoPE extension is to define the differentiator concept for resource assignments to avoid its automatic merging to the same resource based on the attributes.

The purpose of this extension is to prevent resource assignments to Exchange Mailbox resources from being merged into one resource assignment.

RoPE includes an extension model that allows you to modify the behavior of RoPE. Much of the core functionality of RoPE uses the extension model and is implemented as extensions.

The extension calculates the content of the INITIALPASSWORD attribute on the account assignment if the attribute is present on the resource type, and only if it is a new account.

The extension is part of the Manual provisioning feature in Omada Identity.

The purpose of the Provisioning Service extension is to exclude certain identities from being provisioned by OPS.

The purpose of this extension is to calculate a Provisioning status for each CRA. The provisioning status is assigned to the attribute called ProvisioningStatus.

The extension resolves and assigns the value(s) for assignment attributes based on the configured data object reference paths. You can configure it with a number of attributes and corresponding reference aths.

This extension calculates the Risk Score and Risk Level for:

This extension is used for the external SAP GRC SoD check within the Policy & Risk check feature.

The Self-management extension is part of the Omada Identity Self-management feature in the Packaged Solution.

Evaluates event definitions that are defined in the Omada Identity portal for resource types.

The extension removes certain attributes from accounts for the UNRESOLVED identity.

The extension resolves the validity of an object that participates in a calculation of an assignment for an identity. The validity is resolved for objects of these types:

The purpose of the Violation Status Calculator extension is to calculate the violation status for each CRA. The violation status is assigned to the ViolationStatus attribute.