IdStory Identity Manager

Configuration - backend - Update config section

cem (cem@undisclosed.example.com) — 2026-07-24T11:53:11+00:00

Configuration - backend configuration final property properties config setup The application uses a Spring boot configuration in the application.properties files. All the configuration items which are used solely for idm begin with idm. prefix. The configuration items from the file can be overloaded through a setting agenda in the gui ⇒ a server restart isn't needed for changing the configuration with

Automatic Role Guarantor Transfer

koulaj (koulaj@undisclosed.example.com) — 2026-07-23T08:49:54+00:00

topic role guarantor guarantee transfer idm-core Automatic Role Guarantor Transfer NOT RELEASEDDRAFT @since 15.17.0 When a role guarantor stops being able to act as a guarantor (the identity is deleted or blocked, one of its contracts is deleted, deactivated or expires, or the guarantor loses the guarantee role assignment itself), the roles they guaranteed could be left

Application configuration

kolombom (kolombom@undisclosed.example.com) — 2026-07-23T06:50:49+00:00

Notifications Documentation New Approval Workflows Application configuration Configuration file CzechIdM configuration is in the file application.properties. This configuration is read at the application start. If changed, new options will be applied after application restart. Application settings in GUI

New Workflow Engine

kolombom (kolombom@undisclosed.example.com) — 2026-07-23T06:50:07+00:00

Application configuration Documentation Legacy workflows agenda New Workflow Engine IdStory IDM version 15+ includes a proprietary workflow implementation for use in approval processes. The goal is to enable administrators to configure approval processes easily and flexibly, with full control over the sequence and conditions of approval steps. Auditability and robustness of the entire process are ensured.

Workflows

kolombom (kolombom@undisclosed.example.com) — 2026-07-23T06:49:59+00:00

New Approval Workflows Documentation Confidential storage agenda Workflows Warning:legacy15.0.0the new WF documentationremoved16.0.0 Workflow in IdStory IdM is typically used to represent a process involving identities, e.g. the "Enable contract" process. Workflow is a piece of code that * services some process (business process, identity lifecycle process etc

Approval task report - [Combining absolute dates with "last X days"]

otmara (otmara@undisclosed.example.com) — 2026-07-22T11:45:42+00:00

Approval task report Lists approval tasks — one row per task — together with who requested the change, who it was requested for, who decided it and how. Intended for auditing approval activity: "what did this person approve last month", "what is still waiting on this approver", "which requests did this

Automatic approval task approver transfer - [Product provided scripts]

otmara (otmara@undisclosed.example.com) — 2026-07-22T07:43:43+00:00

Automatic approval task approver transfer NOT RELEASED DRAFT When an approval task's approver is deactivated or deleted, the identity is removed as an approver from running approval tasks. When the task would be left without any approver, it is reassigned

Modules - Privileged Accounts Management [pam]

kolombom (kolombom@undisclosed.example.com) — 2026-07-22T06:08:35+00:00

topic module pam privileged accounts cyberark password provisioning idm-pam Modules - Privileged Accounts Management [pam] Introduction The Privileged Accounts Management (PAM) module integrates IdStory IdM with CyberArk and manages the lifecycle and passwords of privileged secondary personal accounts. It builds on the standard

Sets overview report

koulaj (koulaj@undisclosed.example.com) — 2026-07-19T14:07:36+00:00

report Sets overview report This report exports an overview of all sets. It has no filters - every set is included, ordered by code. The report can be rendered to CSV or XLSX. Report columns The report contains one row per set with the following columns:

Sets - Import data from CSV

koulaj (koulaj@undisclosed.example.com) — 2026-07-19T14:06:24+00:00

Sets - Import data from CSV This LRT can be used to import property sets. Prepare CSV file Here is an example of CSV file which can be used for importing sets. name;code;description;setType;guarantors;guarantorRoles;roles Office 365;Office_365;description1;LICENCE;jakub.vesely;Office_365_guarantor|Licence_guarantor;Office_365 Cars;Cars;description2;PROPERTY;jana.novakova|jakub.vesely;Cars_guarantor;Car

Set guarantors

koulaj (koulaj@undisclosed.example.com) — 2026-07-19T14:04:23+00:00

Set guarantors Set guarantor can be understood as the owner of the set, the person responsible for its state. They are the ones who should add new items (property or licences) or edit the existing ones. Set guarantors are the recipients of notifications sent when the items in the set are running out or when there is no free item to assign to a user.

Property overview report

koulaj (koulaj@undisclosed.example.com) — 2026-07-19T14:03:39+00:00

report Property overview report This report exports an overview of property and its assignment to users. The report can be rendered to CSV or XLSX. You can filter the report by: * Sets - restrict the report to selected sets. Only the first selected set is applied

Property - Import data from CSV

koulaj (koulaj@undisclosed.example.com) — 2026-07-19T14:02:55+00:00

Property - Import data from CSV This LRT can be used to import property. Prepare CSV file Here is an example of CSV file which can be used for importing property. name;code;description;setCode;serialNumber;disabled Skoda Octavia 1;octavia_1;Broken seats;Cars;1234567gdfh-dfgdfg46;false Skoda Octavia 2;octavia_2;Ordered;Cars;;true

Prp: permissions

koulaj (koulaj@undisclosed.example.com) — 2026-07-19T14:01:58+00:00

Prp: permissions Just like all the other parts of CzechIdM, what you can do within the property module is governed by permissions. Default roles The module comes with several preconfigured roles with permissions which you can easily use. userRole

Modules - Property and licences [prp]

koulaj (koulaj@undisclosed.example.com) — 2026-07-19T14:01:22+00:00

<- .:modules_comp | .:start | Documentation ^ .:caching | -> Modules - Property and licences [prp] property licence The module for managing property and licences (prp module) is a tool for creating sets of property or licences and assigning them to individual users. Since CzechIdM already has data about users and often manages the systems for which you purchase licences, it is a great idea to use it to manage your licences and property as well.

er-diagram.svg - created

kotynekv (kotynekv@undisclosed.example.com) — 2026-07-16T08:43:48+00:00

20260714-213424.png - created

koulaj (koulaj@undisclosed.example.com) — 2026-07-14T21:34:24+00:00

20260714-212458.png - created

koulaj (koulaj@undisclosed.example.com) — 2026-07-14T21:24:58+00:00

20260714-211600.png - created

koulaj (koulaj@undisclosed.example.com) — 2026-07-14T21:16:00+00:00

20260714-211220.png - created

koulaj (koulaj@undisclosed.example.com) — 2026-07-14T21:12:20+00:00