Browse By Tags

  • Why you need Active Roles, even if you have IGA

    Here are two scenarios I come across frequently, with customers of all sizes, in all industries, when discussing One Identity Active Roles:

    1. “We have an IGA solution. It already manages our Active Directory just fine. Why do I need this?”
  • Password expired for Viadmin, no AD account linked and password can not be changed.

    Hi OneID comunity,

    I recently fired up my demo environment and the password was expired of the viadmin account when trying to setup a new password i got the following error: 
    "Password policy processing failed. An Active Directory user account is required…

  • Permission error to sync Active Directory

    I have these problems, has anyone experienced this? I'm using version 8.1.4, sql server 2017 and windows server 2016, I also tried it on another system with version 2019 and got the same problems.

    when trying to modify permissions or synchronize…

  • Error syncing AD and releasing permissions on job server

    I'm trying to sync my active directory (windows server 2016) with One identity manager but the installation doesn't recognize my Job server.
    I tried to release the sync permission by the Designer but the application does not finalize the command…

  • How to create an ad account in the right target organizational unit based on attributes of the user identity record in OIM

    I would like to create an AD account in an organizational unit depending on the values given in the attributes given in the user file in OIM, that is if we have an A and B in the customattribute1 and 2 we create the account in the 'OR' A and if we have…

  • Active Directory Service Account

    Hi, what would be the best practice for the number of AD Service Account to be used. So, in Safeguard, there are 2 parts which would require AD service account, onboarding Active Directory Asset and Configuring AD in Identity and Authentication. With…

  • Updating ADSAccount Container when disabled

    Hi,
    Hope all are doing well and keep healthy.

    A quick query. We want to move the AD account to different Container / OU before disabling a user. How do I configure this when a Person is disabled (temp or permanent)?
    I believe I've to edit the ADS_ADAccount_Update…

  • Learn how to position and sell One Identity unified identity security solutions

    Being in a position to talk confidently to customers about their emerging challenges takes some initial investment - to understand the problem - to map the problem to the right solution - and align relevant components now and in the future so that the…

  • Ad group not assigned

    Hello experts,

    (Ver 7.1.2)

    We have an active directory group that is not being assigned as we expected.

     

    We have a Service item published in the IT shop that has an Active directory group associated. Whenever an employee requests it and the approval workflow…

  • Active Directory Provisionning

    Hello Everyone, 

    Thanks in advance for your answers.

    I have a problem with the AD Provisionning (Target Synchronization).

    I don't know how to create a kind of CheckBox on "Create User Account" Form via Manager Application (also via Web Portal…

  • Error DPR_NeedExecuteWorkflow

    Hi, everyone. Recently we faced a problem. When we try to compile our database we have such errors "Error compiling script Precode of Chain ADS_Group_Delete(39,0): DPR_NeedExecuteWorkflow is not declared. It may be inaccessible due to its protection level…

  • AD update schema error

    Hi Experts,

    We have exported AD sync project from Synchronization editor and imported it to on new environment.

    After importing it, we have updated connection details to Target system for  new Active Directory then we are trying to update schema.

    We…

  • Custom workflow - email user random generated password

     Hello guys,

     

    I have just recently installed One Identity Password Manager version 5.7.0.1525 in our test-environment. We see that the existing workflows can not apply to our situation, and need to create a new simple custom workflow. We are looking for…

  • Possible to put a cap on the total number of members a group can have?

    Hi,

    Just wondering if/how I could use ActiveRoles to put a limit on the number of members a group can have? Ideally I would like certain AD groups to have a maximum number of members, and then preventing new members from being added until the member count…

  • Group Synchronization

    I have a SQL View that contains a well defined and controlled group population that I would like to Synchronize with a Active Directory Security Group.

    I use the word synchronize because I'd like people who are manually added/removed from the group within…