OIMCustomerSettingDefault Class

When creating users for an identity, set the user as inactive.

Enable delegation on behalf of another identity in the DELEGAT_DELEGATOR field

Managers on any level can create a delegation for their subordinates

Enable exclusive delegation, which removes the master data references for the DELEGATOR

Prioritize desired state values when applying classification and matching of the account owner

Default empty environment id for single tenant installations

Is the environment using new ingestion.

Default (empty) theme for Key Performance Indicators

If true, the old password will be required in order to change the password NOTE: There is a security risk involved if this setting is set to false!

Enforce SSL in the password reset function

If true a notification is sent on password reset enroll

If true a notification is sent on failed password reset

If the password reset fails for this number of times for an Identity, the function will be locked down until unlocked by the helpdesk

Number of correct answers in the reset process

Number of displayed questions in the in enrollment

Number of questions in the reset process

If the password reset fails for this number of times for an Identity, the function will be locked down for a number of minutes

Number of minutes to do a soft lock down

If true a notification is sent on successful password reset

Password reset send owner success notification

Password reset throttling error factor

Password reset throttling error threshold

If true allows usage attribute values with commas etc. inside values (for DNs in ROLEIDs)

Comma delimited list of user group uids that have access to the calculation results of the RoPE engine. The system user always has access - regardless of what is stated here.

SoD re-evaluation processes clear the compensating control. This can be prevented with this setting (set value to False)

SoD re-evaluation processes clear the reason text. This can be prevented with this setting (set value to False)

If true only evaluation objects will be created. Accepted

Number of days the evaluation will be active

Zero means disabled

When set to false the RoleApprovalController.updateApprovalTarget call will not skip events

Use the survey based "Access Request Approval ed2" feature?

Converts object to boolean.

Converts object to DateTime.

Converts object to integer.