CustomerSettingKey Fields

Is access request popularity feature enabled

Period (Number of days) to include when searching for popular direct assignments

Should the Access Request process require that a benificiary has an account in the system for a permission resource being requested?

Comma-separated string of numbers. Used to set the default no of items you see in the resource selection grid in the Access request process. eg: 5,10,20

Controls the default value of the UserSetting 'ShowAlreadyAssignedResources'

Active Directory category ID used when running reports in Windows authentication

Hide active user detail field "Culture"

Hide active user detail "Language"

Hide active user detail "Time zone"

If true then a stack trace parameter (@_StackTrace_) is added to all sql queries.

Allow adding a custom text as reason for a request in Access Request process

Allow deprecated connectivity

Limit the access to the Impersonation feature to a range of IP adresses. Should contain the ip (range) of the CIAM portal servers. If the setting is empty, no restrictions is applied. For instance 192.168.10.*, 192.168.11.*

When enabled it is possible to modify and delete objects originating from feature packages. Note that even when turned off it is possible to edit whitelisted objects.

This setting can enable the mass update feature in Views

System name of a property defined on the Resource data object type. If defined on a Resource it is allowed to request access for the same role multiple times

Allow or-expressions in data object filters. (Or-expressions are very expensive to execute).

Specifies whether the "requires changed value" flag is visible in formsectionfielddlg.aspx

Allow the "History" context menu item (i the page-menu) in dataobjlst.aspx e.t.c.

Allow the "Print" context menu item (i the page-menu) in dataobjlst.aspx e.t.c.

This setting can disable the "No" button in the workitem acceptance dialog

Enables API Documentation UI

Record changes when updating lang strings

Database schema version. Must be is accordance with the Application version.

Number of seconds between the audit trail cycle

Number of seconds between the auth source policy cycle

Number of seconds between the normal archiving cycle

Number of seconds between the long running archiving cycle

Number of object versions archived in each cycle

States whether the role engine should try to assign a value for the USERNAME attribute. Doing so enables an identity to have multiple account to a system (assuming that each account is for an individual account role). Requires the packaged solution.

Enable auto form section collapse on Access Request Page

Max number of items to show in controls which has autocomplete functionality

Take the regional options from the browser rather than from the User profile

Password policy for enterprise server built-in authentication (GUID value of the data object id)

If set to true, the RexExp validation in the DataObject Dialog validation method will be bypassed.

Allows users to click on apply with out field validations

Comma separated list of techical names of terms documents that are used with the CIAM portal. Example: "Cookie policy,Privacy policy,Terms and conditions"

Full internal URL to the website including preceding protocol. Relevant only for cloud environments.

This setting is used to put the application in "configuration mode" which is normally only done in a development environment. Putting the application in "configuration mode" has the following effect: - Various configuration data are not cached (as it would otherwise be) - Web pages include full-length javascript files instead of compressed editions - Temporary db tables with ids are populated in a more debug-friendly way.

Perform validation of code methods and access modifier during application initialization

Behaviour of multivalue fields in CSV download (repeating rows or separated values)

Show custom favorite icon

Show custom HTML website title

Character limit for custom reason in Access Request process

File extensions (comma delim) allowed to be uploaded and attached to data objects.

Adds the option (KEEPFIXED PLAN) to the data object loader. The experience is that the use of temporary tables leads to expensive SQL Server sql recompilations which counts towards fixing the execution plan.

Adds the option (RECOMPILE) to the data object loader. Sometimes the SQL server chooses the wrong execution plan which leads to very long execution times which may be avoided with a recompile despite of the increated compile time

The Data Object Version cache validity period in seconds

Number of data object version rows to purge on startup

Database schema patch level.

Used when ROPE cannot state an account type for identity

When a new user is created he is by default assigned to this culture.

The default dashboard is displayed when the logo in the upper-left corner is activated.

When a new user is created he is by default assigned to this language (id).

Contains the default MenuItem for all users.

Default primary context data object type. System name of a data object type. If specified the value is used when determining an identity's primary context(s) if he hasn't a "primary context type" stated on the identity data object.

When a new user is created he is by default assigned to this time zone (id).

Defines the default validity in days for access request and extend request in new UI (-1 = Never expires)

Disable the automatic update of appstrings after packages imports and db updates

Disable the Debug contextmenu

Controls whether full text index search is disabled. This can be useful on demo machines.

Disable the help from the horizontal menu

if set to true, disables the PreDelete application event, which moves child org units to the parent org unit for deleted org unit objects

Disable the Reference Tree Dialog

Disable queries and mappings schema discovery

The setting can enable and disable the activity sub-rows in process views

Event definitions for account creation and initial password notification are enabled or disabled by default

Enables writing web request info to tblActLog

Controls whether to use Analysis Services to provide KPIs and key figures for dashboards This setting has no effect on SQL Server 2014 and earlier

Enable configuration change logging

Enables context filtering on resource search for Access Request in new UI

Enables filtering on resources by system name in the new UI access request ///

Enables using grace period when a customer doesn't use identity transfer process

Enables language specific help

Run the database maintenance tasks in the timer service

Send out an access request approval mail, with a link to approve/reject directly from the mail

Enables onboading guide (user poppers) functionality

Allow users to expire resource assignments (from the Resource Assignment dialog )

Enables eligibility filtering of resources depending on their contexts and the chosen identities context in Request Access

Enables filtering on resources search for Access Request in new UI

Enable system event logging, to make detailed logging of governance, configuration, employment and system operation events

This setting can disable the optimistic lock on a data object save which validates that two users are not overwriting each others changes. The validation can be disabled if the users do not edit the dataobject fields on the same time, for instance using two difference forms.

Information shown on error: 0 = Only Timestamp, 1 = Timestamp + Exception.Message, 2 = Hides the text but send "Timestamp + Exception.Message" 3 = Hides the text but send "All Information, stacktrace etc." 9 = All information, stacktrace etc.

Maximum number of mails which can be sent out in one go.

Properties to exclude from the dataobject history pages. Comma separated system names.

Contains they keys of all executed update actions

Is true in the PACKSOL master systems (and in general in OIS Instances where content is being developed). Will only be set true in Omada internal instances - not customer instances where configuration is recorded.

States the username of the user (if any) who is currently making changes to the PACKSOL master DB. The purpose is to ensure that only one user is doing so at a time.

In legacy mode, the FIM Sync object names are called the name of the data object type name. (value set to true) In standard mode (default) the FIM sync object types are named after the data object type system name.

Fire events on referring objects when an object is deleted

If set to false, the system will not focus the first editable field.

Always use the MailSender in from field instead of the user invoking the mail action.

Use option hash join in the FTI search. The option has proven to solve an execution plan defect under some circumstances.

Indicates whether the FTI search (if enabled) searches into attached files.

When anonymization import profiles are executed, the specified value is used as basis when data is overwritten.

Enables the new UI Identities and My Identities View for the Global Search

When true, service desk agents will have access to ALL identities in the system regardless of which context they are service desk agent for

Hash join hint configuration. Contains a CSV string of search patterns for injection of a HASH hint in the fulltext search. For instance: "select distinct top 251 do.id from tbldataobject";"select distinct top 501 do.id from tbldataobject" will inject the HASH hint for the SQL that contains specified queries.

Hide user details in "My Settings"

Hide user group memberships in "My Settings"

Hide active workitem link on data object dialog

Hide the "Change password" item in horzmenu.aspx

Hide the context menu for labels in data object forms

Hide type image on proctmplindex and menuindex

Hides the "lookup" button for Set Property drop down controls?

Hide pick myself button on Activity reassign dialog

Are all identities uploaded to the staging DB (aka the source system data db)? If so a number of validations are performed prior to an ODW import. Should be set to true in a GaaS scenario.

Setting can enable update of display names even if the linit has exceeded.

The date OIS was initially installed. Is used on the access request screen

Initially installed software version, e.g. "14.0".

Used to set the default no of items you see in a list page, it is possible to define mulitple items, which would appear as links at the bottom of the list page eg: 10,25,50,0 where 0 means to show all items.

Contains the license key

Right padding in pixels in AppList grids.

Locks the Assignee field on the Activity dialog for process instances.

By default no log entries are added for a survey question, if the fields in the question haven't been changed compared to the previous workflowstep. If this setting is set to true, an entry will be added for every question even if no changes are made

When true the provisioning claims are logged.

Should the system log who reads which data objects and when? The information is displayed in the "history" dialog.

Log the execution times of all web service calls in the ES to tblSystemLog? The setting should only be enabled for tracing/debugging purposes as it carries a performance penalty.

with the MailBcc setting it is possibly to send a copy of each email to a fixed email address.

Number of times an mail delivery is retried

Number of minutes between each mail delivery retry

Number of mails sent per cycle.

MailSender is used as From when sending emails.

MailSenderName is used as From when sending emails.

Minimum age or for activty log entries

Number of activity log rows archived per long cycle

Delete objects versions in the archive after these amount of days

Number of object versions deleted in each archive maintenance cycle

Number of completed process which are marked as deleted

When deleted completed processes, target objects for templates in this list are excluded. Comma separated list of process template UIDs. Processes which manipulate master data object should not have their target object deleted automatically

Minimum number of days that a completed process is kept before being deleted

Minimum number of days that log file rows are kept before being deleted

Number of log file rows which are deleted on each cycle

Purge deleted processes after this amount of days

Number of completed process which are purged

Number of deleted workitems to purge during maintenance

Minimum number of days that an object is kept after being deleted.

Number of deleted object which are deleted during database maintenance

Controls if maintenance tasks should only be run during the specified work week

Max. number of data objects that can be mass updated.

Comma delimited list of user group uids. These groups are allowed to manage various master data that is not controlled by the authorization role logic. If no groups are stated then the built-in Administrators groups are granted access.

Setting for optimizing the SQL query searches on a list of values.

Max returned report objects. Used for: dataobjprint.aspx, dataobjcsv.aspx, dataobjpdf.aspx.

Enforce SSL in the mobile survey approval function

This setting can disable notification emails to inactive users

Number of resources to be displayed in the search result for Access Request in the new UI.

Maximum number of data objects retrieved via OData API in one server response

SSIS PipelineBuffer. Adjust buffer size based on max rows

Auto delete ODW logs older than specfied number of days. If set to 0 feature is disabled.

The maximum number of days of object versions to include in the deletion process, for example an interval of 14 days.

The minimum number of days that object versions can be old, before they should be deleted from the Data Warehouse database, for example 365 days (1 year).

Controls the maximum number of seconds that warehouse is wating for a response from the portal before it will timeout.

SSIS PipelineBuffer. Max number of rows pr. buffer

SSIS PipelineBuffer. Max default buffer size

Number of import errors allowed per object

Controls the maximum number of objects that can be sent in a single request from ODW to ES. The import algorithm will dynamically choose the number of objects in each request, but these will not exceed the chosen configuration value.

Controls the number of concurrent requests during import from ODW to ES. A value of 1 will disable parallel import from ODW to ES.

Internal - OIM database patch level.

Globally unique id of the OIS instance. No two OIS instances should share an instance id - not even DEV/TEST/PROD environments.

Enable redirection of the user back to the portal after the IdP logout

ODWOleDbTimeOut gets the time to wait (in seconds) while trying to establish a connection before terminating the attempt and generating an error. is also used to

If specified, displays partner information on the About page.

If specified, displays the URL for the partner website on the About page.

Enabled or disabled the anonymous password reset page "passwordreset.aspx"

Path to PowerShell scripts location on Cloud

In case of view of Process objects this setting enables addition of DropDownList of process template selection on criteria search screen

Prevent reassignment of an instance activity to the active user

When preventing reassignment of an instance activity to the active user (using PreventReassnActUsr), then still allow System Administrators to pick them selves

Contains the legal number of process templates as agreed in the software contract.

Number of property value rows to purge on startup

Property with log can be loaded in 1 of 4 modes. - 0 (default) is showing the history formatted in the active users timezone. - 1 is showing the entire history formatted with UTC timezone and without boldface markup of the heading of each log entry. - 2 is demand loading the entire history formated as 0. - 3 is loading add data object versions and formatting as 0. Can be used when there are many properties.

When using load mode 3, this threshold is number of log properties with log required before we actually load all object versions

If true, security is overridden for ReferencePathFields in views

Can be used to allow text input (typing) in (single valued) reference property controls that have a custom lookup function. Normally this kind of overriding is done using the FormFieldSetting.LookupUrlTextInput. However, the filter properties in the access request ed2 process are not based on form fields. Comma delimited (reference) property system names.

If true, all the BEH in the system are rendered on data object dialog page. Else onlt the ones used by the form are rendered.

URL for Reporting API

Restrict access to Code method logs

Restrict access to Mail Log to Administrators..

Ensures that Configuration changes are logged in a ChangeSet. If not, an exception is thrown.

Controls whether explicit acceptance of an activity is required before work can be performed on it. If so assignees are presented with an acceptance dialog before they are allowed to complete a work item. If explicit acceptance is not required then the "auto accept" feature is automatically ignored.

Enable or disable the use of master caching in RoPE

The RoPE master data cache validity period in seconds

Delimied system names of reference properties that must be treated as reference attributes in RoPE. (Normally reference properties are treated as string attributes in RoPE).

Holds the url for the RoPE service's remote api. The remote api is used for performing simulations.

Skip assignments of implicit enterprise- and application roles?

Skip assignments of implicit enterprise- and application roles for technical identities

If set to true, the timers will execute in the System User's timezone. By default timers execute on the defined UTC time which gives a deviation in the localtime between summertime and winter time.

The services menu dashboard is displayed when activating the "Services" menu item.

Show the password dialog when creating a new user.

When set to False, the Activity Reassignment dialog will hide the "message to new assignee" input

If true it will be possible to select any given identity view in the "Identity view" property form for SoD Constraint and Assignment Policy

Show flags in the topmenu allowing to change language

If set to false the voting panel will be hidden in voting activites

Should RoPE ignore indirect resource assignments in the ODW?

Should the events be skipped when resource assignments are updated by the system?

Specifies whether html encoding is skipped for the descriptions shown below each process template in proctmplindex.aspx

If true: insert core web site url (without any initial dialog) when WebSiteURL is used in a mail template

Skip displaying the "Omada Enterprise (c) xxxx" text in the bottom of the browser

Contains the Solution type

Sql statements are being sanitized in DataExchange etc.

Password for SSRS

Url to SQL Server Reporting Service

User name for SSRS

The support mail is used on the error page to send of a support mail.

Automatically send mail to this address when an error occurs.

This setting supresses the save data object warning, while uploading a file to a unsaved data object. If true, the data object will be saved automatically before uploading a file.

Base64 encoded logo image used in PDF reports

Comma delimited list of Survey uids, which doesn't allow partial submitting of survey questions

Used to set the UI theme in the application. The theme must correspond to the name of a directory in the [path to web app]\Themes folder.

Comma separated list of timers which can override the default minimum time restriction of 15 minutes

If set to true a trace is written to system log with execution time of app event handlers

If set to true a trace is written to event log when entering an app event handlers

If true then all trace options are enabled: - A stack trace parameter is added to all sql queries - Retrieved AppTexts are logged in AppIdentity.Identity.RetrievedAppTexts and made available in appPageVars.retrievedAppTexts

When set to false, exceptions in CodeMethod be treated as an error and not as a validation - unless the exception is a FriendlyException

The URLs for the actions on the Home Page

For development use. Adds debug info to appstrings and apptexts in the UI.

For development use. Adds extended debug info to appstrings and apptexts in the UI.

The Primary color to use in the UI Theme

The Secondary color to use in the UI Theme

Makes new approvals process the default one

Makes new access request flow the default one ///

In a view, when displaying FixedField.Process, this customer setting will sepecify whether to user the display name or the NameMultiLang property.

Setting which controls which transfer process should be used for identity transfers

The version of the UI that should be displayed

This setting controls whether a right-side wildcard will be applied to filter expressions (for text properties) passed to a view via the querystring (the "FILTEREXPRS" parameter). This has a practical effect for the criteria screen only (DataObjViewCrit.aspx).

Url to Vault Service

Retry Policy to be used for Web Service calls that are retry enabled.

Specifies another main page than main.aspx for the installation. Implemented for APMM, who uses an index page as the main page.

Full url to site incl. protocol and path. E.g.: http://www.oe.com/omada.oe.web

Use activity name in page title instead of description

The content of the XFrameOptions HTTP parameter