- Book Information
- Index
- Preface
- Chapter 1 Workflow
- Understanding Workflow
- Workflow Process Components Overview
- Default Workflow Processes
- Updating a Process for Identity Manager Use
- Standard Workflows
- Customizing a Process
- Configuring Workflow Properties
- Using Workflow Services
- Enabling Workflow Auditing
- Adding Applications
- Chapter 2 Identity Manager Forms
- Understanding Forms
- Active Sync Forms
- End-User Forms
- Customizing Forms
- To Customize a Form
- Overview of Customization
- Additional Customization-Related Topics
- Form Structure
- Form Components
- What Is a Form Field?
- Creating Variables
- Defining Fields
- Defining Field Names
- Field Display Properties
- Disabling Fields
- Hiding Fields
- Calculating Field Values
- Setting Default Values
- Deriving Field Values
- Recalculating Fields
- Guidelines for Structuring a Form
- Optimizing Expressions in Form Fields
- Example Scenario
- Disabling Automatic Linking of New Resources and Users
- Preventing an Attribute from being Displayed in Clear Text on Results Pages
- Calling Resource Methods from Forms
- Referencing a Form from Another Form
- Referencing Fields from Another Form
- Implementing the Identity Manager Whitelist Feature
- Editing a Form
- Working with Display Elements
- Buttons
- Text Fields
- Containers
- Working with Lists
- Creating a Checkbox
- Creating a Radio Button
- Creating a Single-Selection List
- Creating a Multiselection List
- Populating Lists
- Populating Lists of Allowed Values
- Dynamically Populating a Multiselection List of Groups
- Adding a Multiselection List of Groups
- Creating a Text Entry Field in a Selection List
- Filtering the List of Resource Accounts before Display in a Form
- Forms that Support This Feature
- <Exclude> Property Format
- Valid View Attributes
- Example: Excluding an LDAP Resource Type from a List of Resource Accounts
- Calling a FormUtil Method from within the allowedValues Property
- Creating a Label Field
- Working with Other Display Elements
- Adding a Section Heading to a Form
- Adding a Calendar Icon to a Form
- Adding a Back Link
- Positioning Components on a Form
- Using Hidden Components
- Adding a Password Confirmation Challenge
- Including XPRESS Logic Using the Derivation and Expansion Elements
- Calling Methods to Populate Lists
- Getting a List of Unassigned Resources
- Retrieving a List of Accessible Object Types
- Retrieving a List of Object Types Accessible by the Session Owner
- Getting a List of Organizations with Prefixes
- Getting a List of Organizations without Prefixes
- Getting a List of Organizations Display Names with Prefixes
- Retrieving a List of Applications Unassigned to the User
- Constructing Hash Maps
- Disabling Fields
- Hiding Fields
- Calculating Values
- Edit User Form
- Adding Guidance Help to Your Form
- Other Form-Related Tasks
- Alternatives to the Default Create and Edit User Forms
- Available Scalable Forms
- Customizing Tabbed User Form: Moving Password Fields to the Attributes Area
- Turning Off Policy Checking
- Tracking User Password History
- Working with Display Elements
- Testing Your Customized Form
- Sample Forms and Form Fields
- Compliance-Related Forms
- Using the FormUtil Methods
- Chapter 3 Identity Manager Views
- Topics in this Chapter
- Understanding Identity Manager Views
- Understanding the User View
- How the User View Is Integrated with Forms
- How the User View Is Integrated with Workflow
- Generic Object Class
- Path Expressions
- Account Types and User-Oriented Views
- User View Attributes
- Introduction
- Referencing Attributes
- Attributes with Transient Values
- waveset Attribute
- waveset.accountId
- waveset.applications
- waveset.attributes
- waveset.correlationKey
- waveset.creator
- waveset.createDate
- waveset.disabled
- waveset.email
- waveset.exclusions
- waveset.id
- waveset.lastModDate
- waveset.lastModifier
- waveset.locked
- waveset.lockExpiry
- waveset.organization
- waveset.original
- password
- waveset.passwordExpiry
- waveset.passwordExpiryWarning
- waveset.questions
- waveset.resources
- waveset.resourceAssignments
- waveset.roleInfos
- waveset.roles
- waveset.serverId
- accounts Attribute
- Overriding Resource Attributes
- accounts[Lighthouse]
- accounts[<resource>].properties
- accounts[<resource>].waveset.forceUpdate
- global Attribute
- Referencing Two Different Fullname Attributes
- accountInfo Attribute
- accountInfo.accounts
- accountInfo Resource Name Lists
- accountInfo.assigned
- accountInfo.typeNames
- accountInfo.types
- display Attribute
- Deferred Attributes
- Account Correlation View
- Admin Role View
- Change User Answers View
- Change User Capabilities View
- Delegate WorkItems View
- Deprovision View
- Disable View
- Enable View
- Find Objects View
- Org View
- Password View
- Process View
- Reconcile View
- Reconcile Policy View
- Reconcile Status View
- Rename User View
- Reprovision View
- Reset User Password View
- Resource View
- Top Level Attributes
- accountAttributes
- accountId
- accountPolicy
- adapterClassName
- allowedApprovers
- allowedApproversIds
- approvers
- available
- description
- displayName
- excludedAccountsRule
- facets
- identityTemplate
- name
- organizations
- passwordPolicy
- resourceAttributes
- resourcePasswordPolicy
- retryMax
- retryDelay
- retryEmail
- retryEmailThreshold
- startupType
- syncSource
- typeDisplayString
- typeString
- Top Level Attributes
- Resource Object View
- <resourceobjectType>.ResourceType
- <resourceobjectType>.resourceName
- <resourceobjectType>.resourceId
- <resourceobjectType>.objectType
- <resourceobjectType>.objectName
- <resourceobjectType>.objectId
- <resourceobjectType>.requestor
- <resourceobjectType>.attributes
- <resourceobjectType>.oldAttributes
- <resourceobjectType>.organization
- <resourceobjectType>.attrstoget
- <resourceobjectType>.searchContext
- <resourceobjectType>.searchAttributes
- <resourceobjectType>.searchTimelimit
- <resourceobjectType>.ResourceType
- Role View
- Task Schedule View
- Unlock View
- User Entitlement View
- name
- status
- user
- userId
- attestorHint
- userView
- reviewInstanceId
- reviewStartDate
- scanId
- scanInstanceId
- approvalWorkflowName
- organizationId
- attestorComments
- attestorComments[timestamp].name
- attestorComments[timestamp].attestor
- attestorComments[timestamp].time
- attestorComments[timestamp].status
- attestorComments[name].comment
- name
- WorkItem View
- Returning Information about All Active Work Items
- Example: Using the includeRelatedItems Form Property
- Example: Using the relatedItemAttributes Form Property
- Example: Using the includeRelatedItems Form Property
- Example: Using relatedItemFilter Form Property
- Changing the Repository Lock Timeout for Work Items
- Top-Level Attributes
- id
- taskId
- taskName
- processName
- activityName
- description
- owner
- complete
- variables
- workItem
- Returning Information about All Active Work Items
- WorkItem List View
- Deferred Attributes
- Extending Views
- Chapter 4 Working with Rules
- Before You Begin
- Understanding Rules and Rule Libraries
- Developing New Rules and Rule Libraries
- Referencing Rules
- Securing Rules
- Customizing Default Rules and Rule Libraries
- Identity Manager Rules
- AccessEnforcerLibrary
- ActiveSync Rules
- ADRules Library
- AlphaNumeric Rules Library
- Approval Transaction Message
- Approval Transaction Message Helper
- Attestation Remediation Transaction Message
- Attestation Remediation Transaction Message Helper
- Attestation Transaction Message
- Attestation Transaction Message Helper
- CheckDictionaryWord
- DateLibrary
- End User Controlled Organizations
- EndUserRuleLibrary
- ExcludedAccountsRule
- getAvailableServerOptions
- InsertDictionaryWord
- IS_DELETE
- Is Manager
- LoginCorrelationRules
- My Direct Reports
- NamingRules Library
- NewUsernameRules
- Object Approvers As Attestors
- Object Owners As Attestors
- Organization Names
- OS400UserFormRules
- RACFUserFormRules
- Reconciliation Rules
- RegionalConstants Library
- Remediation Transaction Message
- Remediation Transaction Message Helper
- ResourceFormRules
- Resource Names
- Role Approvers
- Role Notifications
- Role Owners
- Sample On Local Network
- SAP Portal User Form Default Values
- ShellRules
- SIEBEL_NAV_RULE
- TestDictionary
- TopSecretUserFormRules
- User Members Rule
- USER_EMAIL_MATCHES_ACCOUNT_EMAIL_CONF
- USER_EMAIL_MATCHES_ACCOUNT_EMAIL_CORR
- USER_FIRST_AND_LAST_NAMES_MATCH_ACCOUNT
- USER_NAME_MATCHES_ACCOUNT_ID
- USER_OWNS_MATCHING_ACCOUNT_ID
- Users Without a Manager
- Use SubjectDN Common Name
- Auditor Rules
- Audit Policy Rules
- Service Provider Rules
- Identity Manager Rules
- Chapter 5 XPRESS Language
- Topics in this Chapter
- About the XPRESS Language
- Working with Expressions
- Functions
- Value Constructor Expressions
- Arithmetic Expressions
- Logical Expressions
- String Manipulation Expressions
- List Manipulation Expressions
- Conditional, Iteration, and Block Expressions
- Variables and Function Definition Expressions
- Object Manipulation Expressions
- Java and JavaScript Expressions
- Debugging and Testing Expressions
- Data Types
- Chapter 6 XML Object Language
- Chapter 7 HTML Display Components
- HTML Display Components
- Component Classes
- Component Subclasses
- Chapter 8 Form and Process Mappings
- Chapter 9 Error Codes