How to create a certification in which the reviewer is the group manager?

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hello,
I have an use case involving these components: Identity Now, Active Directory (AD), IQService configured in the AD source and OneIdentity active-roles.

The normal user accounts are stored in the AD source and the admin user accounts are stored in the OneIdentity active-roles.

In the OneIdentity active-roles, the admin groups have a Manager. The Client wants a certification campaign in which the Reviewer is the Group Manager, so the entitlement owner. However, we don´t have Group Manager option in the certification feature.

Anyone with this specific use case who has found a solution?

Thanks a lot, Andrea.

2

We have solved this by using the API to create a new campaign for each Access Profile owner. We pull a list of all access and owners. Then for each owner there is, we create a campaign that has all the APs they are owners for and then we loop through and create the campaign. It’s not ideal but has worked for us OK

1 Like