OIMCustomerSettingKey Fields

If this setting set to true, it will be allowed to make a request without specifying roles in RoleRequestFormPart Default is false

If this setting set to true, users which can approve roles can also approve roles assignments for themselves.

Commadelim attribute (property) system names for which "technical" values will be presented to ResolvingAttributeDisplayValues event handlers.

Is the environment using new ingestion.

When creating users for an identity, set the user as inactive.

Defines if events skipped when creating a new role assignment using CreateRoleAssignments method

Defines the Default Role Folder Owner. The Role Folder Owner is mandatory. In the Self Management concept this ensures that a RoleFolder Owner is assigned, when the last Owner is removed. If not defined it defaults to Administrator.

Defines the Default System Owner. The System Owner is mandatory. In the Self Management concept this ensures that a System Owner is assigned, when the last Owner is removed. If not defined it defaults to Administrator.

User groups UIDs which has access to setting up delegation on behalf of all others without being their manager

Enable delegation on behalf of another identity in the DELEGAT_DELEGATOR field

Managers on any level can create a delegation for their subordinates

Enable exclusive delegation, which removes the master data references for the DELEGATOR

Prioritize desired state values when applying classification and matching of the account owner

Environment Id for validating requests in multi tenant installations

The setting affects the behaviour of the API to retrieve the manager of an Identity. If the value is set to 0 the method looks for users in Identity.Manager and returns these if available. If Identity.Manager is empty it will look for the manager in field Identity.OrgUnit.Manager. If the value is set to 1, the method looks up both Identity.Manager and Identity.OrgUnit.Manager

Is the environment using new ingestion.

Used for setting the theme for Key Performance Indicators

Configuration of RoleAssignmentController API. The set to True, the ValidFrom of new RoleAssignment objects will be narrowed to the ValidFrom of the Identity. If set to False, the ValidFrom will set to the values set by the calling method.

Configuration of RoleAssignmentController API. The set to True, the ValidTo of new RoleAssignment objects will be narrowed to the ValidTo of the Identity. If set to False, the ValidTo will set to the values set by the calling method.

The AzureAD which can validate the end user's current/old password

If true, the old password will be required in order to change the password. NOTE: There is a security risk involved if this setting is set to false!

Enforce SSL in the password reset function

If true a notification is sent on successful password reset enroll

If true a notification is sent on failed password reset

If the password reset fails for this number of times for an Identity, the function will be locked down until unlocked by the helpdesk

The Ldap which can validate the end user's current/old password

Password reset lookup property

Number of correct answers in the reset process

Number of displayed questions in the in enrollment

Number of questions in the reset process

If the password reset fails for this number of times for an Identity, the function will be locked down for a number of minutes

Number of minutes to do a soft lock down

If true a notification is sent on successful password reset

Password reset send owner success notification

Password reset throttling error factor

Password reset throttling error threshold

Use the horizons worker service for previewing data.

If true allows usage attribute values with commas etc. inside values (for DNs in ROLEIDs)

Comma delimited list of user group uids that have access to the calculation results of the RoPE engine. The system user always has access - regardless of what is stated here.

When long attribute messages are disabled only the new attribute value is shown in manual provisioning tasks.

The setting affects the behaviour of the API to create role assignments. If a role has a defined approval method and if the requestor is also in the approval group, then the role assignment is immediately activated. The flag controls if events are fired during this particular update of a role assignment.

SoD re-evaluation processes clear the compensating control. This can be prevented with this setting

SoD re-evaluation processes clear the reason text. This can be prevented with this setting

If set to true the SoD evaluation will create the violation evaluation object with an accepted state and not the entire process. Can be used during initial load of a constraint model.

SoD evaluation processes can be kicked in before the expiration. This setting configures the number of days before the expiration.

SoD re-evaluation processes can be kicked in before the expiration. This setting configures the number of days before the expiration.

Used for defining the process template UID of the survey template used for access request approval

When set to false the RoleApprovalController.updateApprovalTarget call will not skip events

Use the survey based "Access Request Approval ed2" feature?