Omada.OE.Solution.OIM.Assembly.BeforeSaveHandlers Namespace

The save handler clears the value of the AR_REQ_FOR_IDENTITY property when a TRG_ACCESSREQUEST is saved (and it is not a text request). The reason for this is that the value of the property doesn't necessarily relect which identities access has been requested for. However, the value is not cleared in case it's not a new object, this could be caused by the built-in copy rule executed when the onboard contractor process is submitted and the "Request access" checkbox is checked.

Validates when an account resource is saved that: a) It is not defined for multiple account types. b) Another account resource doesn't already exist for the same account type (for the same system). c) The account name format is unique for the account resources in the system

Validates APPLIESTO on new tags

Validate XML schema of configuration objects (which contains XML data)

Prevents that ContextAssignment data objects are created for personal contexts.

Validates if the grace days property of context type dot has correct value (0-365 days)

Validates the integrity of a ControlPolicy data object when it is saved.

Prevents ODW from overwriting context status as "Deleted", if the status is already "Deleted (accepted)" or "Deleted (rejected)"

The ODW always exports resources as having status "Active" (except when it wants to delete a resource - the it assigns status value "Deleted"). We do, however, only want to update the staus in the ES if the current status is "Deleted" - this in order to allow the ODW to undelete a resource. This class implementes that.

Prevents that the "Override lockdown" and "Requires license" properties are changed on a feature package.

The before save event handler, which injects system business key to the SQL queries.

Ensures that new non-ODW identities are assigned a unique OISID, e.g. identities from CIAM or the Onboard Contractor process.

Prevents that an ODW export changes the status of a locked identity to "active".

Handler responsible for taking english version from the NAMEML property and assigning it to the non-language NAME property.

Validates that a PASSWORDPOLICY data object doesn't have a minimum length greater than the maximum length.

What it does: - When an identity is specified in the IDENTITYREF property on a personal CONTEXT object then: - The specified identity is updated so that its membership property (for the context type) refers the context - If the context used to specify another identity then its membership property is also updated (the context is removed from it) - When the identity specified in the IDENTITYREF property on a personal context object is CLEARED then: - The previously specified identity is updated so that its membership property no longer refers the context - The personal context lives on as an orphan context (it isn't used for anything anymore unless a new identity is specified for it) - If a context (of a personal type) is ADDED to the membership property of an IDENTITY then: - It is validated that the context doesn't already refer another identity - if so an error is thrown - The context is updated: its IDENTITYREF property is set to refer the identity - If a context (of a personal type) is REMOVED from the membership property of an identity then: - The context is deleted

Contains validation logic for the Policy and Risk Check DOT

Contains validation logic for the Prioritization policy DOT

Contains a pre-delete handler for resource assignment objects which prevents deletion if the resource assignment object is part of an ongoing access request approval survey

Contains validation logic for resources

Validates that RISKWEIGHT and RISKVALUE (on classification categories and tags) can't be negative. Also, clears the value of RISKWEIGHT and RISKVALUE if category isn't "risk relevant".

Validate assignee expressions inside configuration xml

Contains logic to validate the Deadline value of a survey instance object

Contains logic which prevents deletion of task mapping if it is used in provisioning configuration It also prevents from adding two task mappings with same name

Validates that a data object with the VALIDFROM and VALIDTO properties doesn't have an invalid validity period (where VALIDFROM is later than VALIDTO).

Contains validation logic for the Web Request Configuration DOT

Encrypts password before saving in the Web Request Configuration DOT