Skip to main content
Version: Omada Identity Cloud

Notification mail templates

Mail templates sent for Segregation of Duties (SoD) notifications can include placeholders that are replaced with details of the assignments the notification is about. Use this page to add these placeholders to a mail template.

tip

To configure which recipients receive which mail template, see Configure notification recipients.

Assignment sections​

Placeholders that describe an assignment must be placed between a matching pair of start and end section tags. The section between the tags is repeated once for every assignment that matches the section.

SectionContents
[BLOCKED_ASSIGNMENTS_START] ... [BLOCKED_ASSIGNMENTS_END]Assignments that remain blocked.
[ALLOWED_ASSIGNMENTS_START] ... [ALLOWED_ASSIGNMENTS_END]Assignments that were allowed.
[REVOKED_ASSIGNMENTS_START] ... [REVOKED_ASSIGNMENTS_END]Blocked assignments that were revoked or expired. This section is shown only when blocked assignments are configured to expire.

If no assignments match a section, the complete section is removed from the mail.

important

Section and assignment tags are case-sensitive. Write them exactly as shown on this page.

Assignment tags​

Use the following tags inside an assignment section:

TagValue
[ASSIGNMENT_RESOURCE]Resource name.
[ASSIGNMENT_VIOLATION]Violation descriptions.
[ASSIGNMENT_CONSTRAINT]Constraint names.
[ASSIGNMENT_VALID_FROM]Assignment start date/time.
[ASSIGNMENT_VALID_TO]Assignment end date/time.
[ASSIGNMENT_IDENTITY]Identity display name.
[ASSIGNMENT_IDENTITY_FIRST_NAME]Identity first name.
[ASSIGNMENT_IDENTITY_LAST_NAME]Identity last name.
[ASSIGNMENT_IDENTITY_ID]Identity identifier.
[ASSIGNMENT_DISABLED]Whether the assignment is disabled.
[ASSIGNMENT_COMPLIANCE_STATUS]Compliance status.
[ASSIGNMENT_ACCOUNT_NAME]Account name.
[ASSIGNMENT_ACCOUNT_TYPE]Account type.

A tag can resolve to an empty value when the assignment has no corresponding information.

Examples​

Blocked assignments​

example
The following assignments are blocked:

[BLOCKED_ASSIGNMENTS_START]
Resource: [ASSIGNMENT_RESOURCE]
Account: [ASSIGNMENT_ACCOUNT_NAME]
Identity: [ASSIGNMENT_IDENTITY]
Violations: [ASSIGNMENT_VIOLATION]
Constraints: [ASSIGNMENT_CONSTRAINT]

[BLOCKED_ASSIGNMENTS_END]

Allowed assignments​

example
The following assignments were allowed:

[ALLOWED_ASSIGNMENTS_START]
[ASSIGNMENT_IDENTITY_FIRST_NAME] [ASSIGNMENT_IDENTITY_LAST_NAME]
([ASSIGNMENT_IDENTITY_ID]) allowed:
[ASSIGNMENT_RESOURCE] / [ASSIGNMENT_ACCOUNT_NAME]
Status: [ASSIGNMENT_COMPLIANCE_STATUS]
Valid from [ASSIGNMENT_VALID_FROM] to [ASSIGNMENT_VALID_TO]

[ALLOWED_ASSIGNMENTS_END]

HTML table row​

example
<table>
<tr><th>Resource</th><th>Identity</th><th>Status</th></tr>
[BLOCKED_ASSIGNMENTS_START]
<tr>
  <td>[ASSIGNMENT_RESOURCE]</td>
  <td>[ASSIGNMENT_IDENTITY]</td>
  <td>[ASSIGNMENT_COMPLIANCE_STATUS]</td>
</tr>
[BLOCKED_ASSIGNMENTS_END]
</table>

Checklist​

  1. Create and save the mail template.
  2. Copy the template ID into a new MailRecipient entry, as described in Configure notification recipients.
  3. Set the recipient expression.
  4. Place assignment tags inside a matching assignment section.
  5. Check that the template is sent only to the recipients resolved by its own AssigneeExpression.