IdStory Identity Manager

20260813-150131.png - created

otmara (otmara@undisclosed.example.com) — 2026-08-13T15:01:31+00:00

Modules - Technical accounts [tech] - [Getting Started]

otmara (otmara@undisclosed.example.com) — 2026-08-13T15:01:31+00:00

account technical module technical_account idm-tech Modules - Technical accounts [tech] paid The Technical Accounts module in Identity Management (IdM) is designed to help manage accounts that are not tied to a specific user identity, but instead serve a technical or system purpose. These accounts – often referred to as

Technical Account Module - Technical Assets - [Technical asset agenda]

otmara (otmara@undisclosed.example.com) — 2026-08-13T13:29:08+00:00

Technical Account Module - Technical Assets Overview A technical asset represents a specific application, information system, or technological unit that requires its own access permissions to function and communicate with its environment (other applications and systems). By itself, it is not a specific account; rather, it is the owner and umbrella element for so-called

ImportTechnicalAccountsFromCSVExecutor - [Column Mapping]

otmara (otmara@undisclosed.example.com) — 2026-08-13T11:31:54+00:00

ImportTechnicalAccountsFromCSVExecutor Long Running Task (LRT) that bulk-creates or updates Technical Accounts in CzechIdM by reading a semicolon-separated CSV file. Each CSV row represents one technical account. The task maps configurable column names to entity fields, supports dry-run mode, and never triggers unintended provisioning operations on existing accounts.

Automatic Role Guarantor Transfer

cem (cem@undisclosed.example.com) — 2026-08-13T11:21:04+00:00

topic role guarantor guarantee transfer idm-core Automatic Role Guarantor Transfer @since 15.17.0 When a role guarantor stops being able to act as a guarantor (the identity is deleted or blocked, one of its contracts is deleted, deactivated or expires, or the guarantor loses the guarantee role assignment itself), the roles they guaranteed could be left

Configuration - backend

cem (cem@undisclosed.example.com) — 2026-08-12T11:44:07+00:00

Configuration - backend configuration final property properties config setup The application uses a Spring boot configuration in the application.properties files. All the configuration items which are used solely for idm begin with idm. prefix. The configuration items from the file can be overloaded through a setting agenda in the gui ⇒ a server restart isn't needed for changing the configuration with

Fix validity data on business roles

apeterova (apeterova@undisclosed.example.com) — 2026-08-12T10:42:31+00:00

Fix validity data on business roles Release 15.17.0 fixed a situation where sub roles shared by multiple automatic (business) roles sometimes did not update their validity after a contract change. See redmine #40570. * Warning: the fix prevents new inconsistencies from being created, but it does not repair existing incorrect validities of sub roles in the data.

Automatic approval task approver transfer - Docs edit after rewrite

cem (cem@undisclosed.example.com) — 2026-08-12T08:15:40+00:00

topic approval task reassign approver workflow Automatic approval task approver transfer NOT RELEASEDDRAFT When the last active approver of a running approval task is deactivated or deleted, the task is reassigned to new approvers resolved by a configurable script (or to default approvers, when no script is configured or the script resolves nobody). A deactivated identity is kept as an approver for history (and is rendered grey on the frontend), a deleted identity's approver records are removed…

Identities (users)

kopro (kopro@undisclosed.example.com) — 2026-08-10T08:07:40+00:00

Documentation Documentation Contracts Identities (users) In identity management, identity is a set of information that describes a real person. Some of the information like First Name, Last Name, Login or Password is crucial for many IT systems, since they process them, or e.g. use them for authentication or authorization. Identity management systems process the data about identity, transform them and use them to manage accounts on connected systems.

20260727-134920.png - created

otmara (otmara@undisclosed.example.com) — 2026-07-27T13:49:20+00:00

20260727-133443.png - created

otmara (otmara@undisclosed.example.com) — 2026-07-27T13:34:43+00:00

20260727-133031.png - created

otmara (otmara@undisclosed.example.com) — 2026-07-27T13:30:31+00:00

er-diagram.svg - created

kotynekv (kotynekv@undisclosed.example.com) — 2026-07-16T08:43:48+00:00

20260714-213424.png - created

koulaj (koulaj@undisclosed.example.com) — 2026-07-14T21:34:24+00:00

20260714-212458.png - created

koulaj (koulaj@undisclosed.example.com) — 2026-07-14T21:24:58+00:00

20260714-211600.png - created

koulaj (koulaj@undisclosed.example.com) — 2026-07-14T21:16:00+00:00

20260714-211220.png - created

koulaj (koulaj@undisclosed.example.com) — 2026-07-14T21:12:20+00:00

20260710-101445.png - created

otmara (otmara@undisclosed.example.com) — 2026-07-10T10:14:45+00:00