AD Application Access Request - Non Role Based

IdentityIQ (IIQ) IIQ Discussion and Questions
, ,
1

We are on IIQ 8.3

Is there a way to request an AD Account other than using Roles? Like simply request Application account somehow?
We have been using Roles, but are about to onboard a few hundred AD Domains and were looking/hoping for something a bit quicker/simpler.

Thanks for any tips!

2

Hi @chrisk,

yes you can request an account from Manage Account page:

image
image1886Ɨ309 16.3 KB

select an identity and you can click on Request Account on the right and request a new account.

to enable this button, you need to have almost one application on this selection on Lifecycle Manager*:

image
image443Ɨ424 23.2 KB

*you can also configure it from debug adding ADDITIONAL_ACCOUNT_REQUEST on feature string on application.

If you want give the capability on population\workgroups\users you need mark the Allow requesting new accounts flag on Manage Account Option on relative quicklink population:

image
image638Ɨ339 30.5 KB

1 Like
3

That is great news! Iā€™m still trying to get it to work, but super excited about the possibility!

Thanks for your time and great response, truly appreciated!

EDIT: Got it to work! I think I had to add ACCOUNT_ONLY_REQUEST to the feature string in the Application. After doing that, the button was then accessible.

Thanks again!
Chris

1 Like