OpenText NetIQ Identity Governance Community

Add ability to IGA to enable the creation of permissions (AD groups)

gogga

It would be nice to be able to add the ability to create permisisons (in our case AD groups) directly from IGA.
- 5 months ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
Identity collector triggered application collection

Sjoerdk

When you have IDM provision accounts to (for example) AD, IGA needs to collect these accounts to be able to assign permissions. It would be great if there is an option that if the identity collector collects additional identities (full collection or IGIM…
- 6 months ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
Add REMOVE_APPLICATION_FROM_USER to Entitlement Fulfiller

dbuschke

Hi, the provided Entitlement Fulfiller is able to grant accounts and permissions to an identity. It also revokes permission from an identity. But currently it doesn't support revoking accounts from identities. Revoking accounts from identities automatically…
- 8 months ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
Add the capability to request creation of a new permission (new ad group, new ldap group, etc)

gogga

It would be beneficial to have the ability to request the creation of a new AD group or new LDAP group directly from within IGA. We are moving our logical access request system from CA Unicenter to IGA, but we will have to keep the request for creating…
- 10 months ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
IGA - Fulfillment Template Tokens

David Roblee

Requesting the following tokens be added to fulfillment notification templates: appName reviewName reviewOwner
- over 1 year ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
Automatic Fulfillment Verification without switching to Manual Fulfillment for some errors

Tyler Schafer

Hi! Recently did a review and a bunch of access changes were made during our review period. This ended up in a situation where we had a bunch of these errors when processing the removals that occured in the access reviews. Unexpected error while…
- over 1 year ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
Fulfillment with more than one account

Robert Ivey

Currently, if an Identity has more than one account in a connected system, if a user tries to request a permission for that application, no account is provided to fulfillment, making it very difficult to handle the fulfillment. Could an array containing…
- over 1 year ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
Turn on/off fulfillment emails per review

Zachary Mckerrow

I run a review every day that grabs any users that have sensitive access in one of our applications that is not authorized by a business role. We want to set up automatic fulfillment of some kind on this review to either run a sync between the application…
- over 2 years ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
Allow fulfillment verification to be canceled

Jimbot

I experienced a use-case that I would have thought is rare, but I'm realizing this will happen again in the future. We had an application in IG that ran a review, there were a few removes and fulfillment items, and the review was approved. For fulfillment…
- over 2 years ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
Automatic verification

Aleksandar Mujadin

If a target application supports automated fulfillment IG should be able to do automatic verification without a collection/publication cycle. For example, if a group membership is added/removed in AD by IG, IG should be able to query the target object…
- over 2 years ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
IG Fulfillment Targets- allow email integration with ITSM solution

Hosein Nahidian

allow IG fulfillment to generate an email to fulfilment target system (ITSM) with actionable information. Most enterprises are setup to allow ticket generation by email. This would be much simpler and fast to integrate the IG fulfillment process into…
- over 2 years ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
Improve Fulfillment configuration customization inheritance

JamesQ

Currently, if a fulfillment target is customized for an application fulfillment configuration, the entire fulfillment target is copied to the new app fulfillment configuration, not just the customized fields. Additionally, the certificate for the customized…
- over 2 years ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
Fulfillment Notification Emails controlled per application

Jimbot

Currently there is one email notification that is used when a Identity looses access, and it informs them something has been taken away. In my ideal universe, this notification would be configurable as part of the application fulfillment config. This…
- over 2 years ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
IG Fulfillment - ability to download pending fulfillment requests to csv

Hosein Nahidian

For IG fulfillments, while we are working to integrate with our ITSM solution, the ability to download pending fulfillment requests to a CSV file would make manual ticketing to track requested changes from Access Reviews much easier.
- over 2 years ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
The resource should be notified if the request has been approved or denied.

Blaine Varner

After the Requestor (Manager) submits a request for a resource (subordinate), the resource does not receive any communication from the system if the request was approved or denied. If the Requestor is OOO or just otherwise busy, there is delay for the…
- over 2 years ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
Fullfillment enhancement on certain error conditions

abergvall

Hello, When we are fullfilling via LDP based fulfillers we often get errors back claiming that the object already exists, or the membership already exist. Those end up in fullfillment erors and are then sitting there forever. Its time to take…
- over 2 years ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
Fulfillment errors should automatically clean up once the permission is granted

Slade Perry

We are using the SOAP fulfiller to fulfill a permission. Sometimes the fulfillment succeeds but the verification fails. It happens often enough that we have to manually go clear the fulfillment request witha message that is was fulfilled on such and such…
- over 2 years ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
Permission Removed from Role needs to be cleaned up or noted if not

Slade Perry

When a permission is not set to auto revoke on a role and is removed from a role. that permission is not cleaned up off of the users. At this point there is no explanation on why the user has the permission or why its still there. Whenever a permission…
- over 2 years ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
Create Groups through IG Form

Louis Utsch

I want my end users to be able to go to the "Governance Administration" tab and somewhere be able to bring up a custom form that would kick off a custom workflow to create a group in my directory system. The problem is that the way IG currently operates…
- over 2 years ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
Expose application attributes to the fulfillment process

abergvall

This weeks suggestion: It would be nice if we could send in attributes from the application datasource (application Classification and all the others, selectable) to the fulfillment process - sometimes you want to add some extra values into the endpoint…
- over 2 years ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
Make authentication option oauth2 available on all collector and fullfillment templates

abergvall

Hello, We have a requirement from a couple of customers security people that all REST/ServiceNow connecitons needs to be oauth2. User and password is not allowed. It can not be a big thing to solve since the SCIM 3.7.0 template has that functionality…
- over 2 years ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
Requestor should be notified via email if their Access Request failed (due to a fulfillment error)

Noel Desouza

It would be useful if requestors are notified via email if their Access Request has failed (due to a fulfillment error), so they know something went wrong and chase it down with the support team - rather than presuming the ir access request was successful…
- over 2 years ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
Add changeSet ID to the 'Fulfillment Error' Message for a request on the 'All Pending Requests' page

Noel Desouza

Where a request has a Fulfillment Error, the error message displayed for the request in the ' All Pending Requests' page includes the changeItem id - which is great, as it identifies the unique ID of the individual permission in the request that failed…
- over 2 years ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
Make reviewers' comments available to External Workflow Fulfillment

Jia ***

When reviewers submit review items for remove/modify, they have the ability to insert comments. The comments that entered by reviewers currently only viewable by Review Owner/Auditor on IG portal or Reporting. It is good to have the comments also available…
- over 3 years ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
Fulfillment Notification

Jimbot

Sometimes when fulfillment occurs, the business would like to send an email notification as well. I know we could accomplish this with a custom fulfiller, but it would be awesome if, say, there was an option to send an email template, using the fulfillment…
- over 3 years ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas

Menu

OpenText NetIQ Identity Governance

Add ability to IGA to enable the creation of permissions (AD groups)

Identity collector triggered application collection

Add REMOVE_APPLICATION_FROM_USER to Entitlement Fulfiller

Add the capability to request creation of a new permission (new ad group, new ldap group, etc)

IGA - Fulfillment Template Tokens

Automatic Fulfillment Verification without switching to Manual Fulfillment for some errors

Fulfillment with more than one account

Turn on/off fulfillment emails per review

Allow fulfillment verification to be canceled

Automatic verification

IG Fulfillment Targets- allow email integration with ITSM solution

Improve Fulfillment configuration customization inheritance

Fulfillment Notification Emails controlled per application

IG Fulfillment - ability to download pending fulfillment requests to csv

The resource should be notified if the request has been approved or denied.

Fullfillment enhancement on certain error conditions

Fulfillment errors should automatically clean up once the permission is granted

Permission Removed from Role needs to be cleaned up or noted if not

Create Groups through IG Form

Expose application attributes to the fulfillment process

Make authentication option oauth2 available on all collector and fullfillment templates

Requestor should be notified via email if their Access Request failed (due to a fulfillment error)

Add changeSet ID to the 'Fulfillment Error' Message for a request on the 'All Pending Requests' page

Make reviewers' comments available to External Workflow Fulfillment

Fulfillment Notification

Resources

Menu

Popular Tags

Resources