IdStory Identity Manager - devel:documentation:modules_extras

Account creation notification

Anonymous (anonymous@undisclosed.example.com) — 2025-07-02T12:12:30+00:00

Account creation notification Whole functionality is handled by the extras-notify-acc-creation-processor processor. This processor sends notifications to users at the creation of their account on a particular system or systems, depending on the configuration.

Approval of externs created from Hub

Anonymous (anonymous@undisclosed.example.com) — 2024-05-22T10:28:40+00:00

Approval of externs created from Hub This feature brings the possibility to have all externs created from Hub approved by someone in IdM. Who should approve and what should happen when approved/disapproved is fully configurable, because it is encapsulated in IdM scripts.

Deduplication for automatic roles by organization

Anonymous (anonymous@undisclosed.example.com) — 2026-01-08T14:36:48+00:00

Deduplication for automatic roles by organization The feature is very usefull for IdStory environment that has defined many same automatic roles by organization strcuture. For example: In this case exists organization structure with three levels. In last three level automatic roles are defined. Automatic roles are defined for same role.

Check whether a value is unique in a system

Anonymous (anonymous@undisclosed.example.com) — 2022-03-18T09:25:28+00:00

Check whether a value is unique in a system Sometimes it is necessary to generate attributes like username or email which are unique even in a certain system (e. g., MS AD). However, not every user in the system must be in IdM. In some cases, historical accounts still exist or IdM manages only a part of the system. For these reasons, a service which enables you to search a system and check that an attribute value is unique was created.

Modules - Extras: Copying assigned roles from the main contract to a contract valid in the future

Anonymous (anonymous@undisclosed.example.com) — 2021-11-02T08:35:09+00:00

Modules - Extras: Copying assigned roles from the main contract to a contract valid in the future This feature allows you to automatically copy roles from the existing main contract to a contract valid in the future. This serves to handle the issue with cases when contract validity is not extended but rather a new contract is created altogether. This means that the user will not lose their roles after their currently main contract ends.

Create automatic role for organization group

Anonymous (anonymous@undisclosed.example.com) — 2023-06-28T10:18:55+00:00

Create automatic role for organization group extras-role-automatic-organization-role-processor" This feature creates automatic organization role while saving role (group). Role can be created/updated manually or from system (Active Directory) Process check role EAV whether role is organization group.

Evaluator (permissions) for users with given form projection who do not have contract in denied organization

Anonymous (anonymous@undisclosed.example.com) — 2023-12-14T16:38:09+00:00

Evaluator (permissions) for users with given form projection who do not have contract in denied organization This evaluator gives permission to IdmIdentity entity, if: * Identity is of the selected type (IdmFormProjection). * Identity does not have any contract in selected denied organisation.

Identity by tree node evaluator

Anonymous (anonymous@undisclosed.example.com) — 2020-04-24T07:17:36+00:00

Identity by tree node evaluator from version 1.9.0exists only in LTS version! The evaluator gives permissions for all identities that has contract position on selected tree node by evaluator configuration or positions that exists recursively under the given tree node.

Identity temporary forced activation (since 5.4.0)

Anonymous (anonymous@undisclosed.example.com) — 2025-02-03T15:01:53+00:00

Identity temporary forced activation (since 5.4.0) Business problem On some systems, user can be managed only while being active. In order to be able to change his/her settings before he/she actually enters, a mechanism has been introduced where it is possible to set EAV on identity indicating forced activation, globally configure the length of the forced activation together with LRT, which removes that EAV for identities whose forced activation has already expired.

Import code list and it's items

Anonymous (anonymous@undisclosed.example.com) — 2020-06-17T05:53:32+00:00

Import code list and it's items Since 1.9.0 LTS or 2.4.0 depends on version of IdM LRT has some configuration options which must be filled. * CSV with values for import - Required - CSV file with two columns "key" and "value" the order of columns is not checked

Missing related entity permissions report

Anonymous (anonymous@undisclosed.example.com) — 2024-05-21T19:40:04+00:00

Missing related entity permissions report This feature brings report named Find missing related entity permissions. It finds all create/update user actions from past (scans audit) that those users who performed them couldn't perform with their current permissions because of missing permission on related entities.

Notification about roles without guarantees

Anonymous (anonymous@undisclosed.example.com) — 2024-06-04T12:59:35+00:00

Notification about roles without guarantees How to use it First, set configuration for notification template. Go to Notifications → Configuration → green button Add * Topic = this has to be set to extras:expiredGuaranteeOnRoles * Level = this has to be set to "INFO"

Import IdmPassword from CSV file

Anonymous (anonymous@undisclosed.example.com) — 2021-05-24T13:48:20+00:00

Import IdmPassword from CSV file To import passwords to users you can use ImportIdMPasswordFromCSV long-running task, which is available in the extras module since version 3.2.0. Configuration ImportIdMPasswordFromCSV uses the default interface for CSV importing tasks along with a few of its own configuration properties.

Recalculate identities with roles

Anonymous (anonymous@undisclosed.example.com) — 2024-04-16T14:44:59+00:00

Recalculate identities with roles Task performs recalculate accounts and provisioning on identities. How to use it Recalculating is implemented as long running task. You must go to Settings → Task scheduler → Scheduled tasks and in the agenda just plan new long running task with name

Modules - Extras: Resize profile photo to defined size

Anonymous (anonymous@undisclosed.example.com) — 2023-09-05T15:22:13+00:00

Modules - Extras: Resize profile photo to defined size This feature allows you to resize user profile photos to a defined size. The processor automatically adjusts the size of the inserted profile photo according to the specified configuration and the new photo saves.

Role by role catalogue evaluator

Anonymous (anonymous@undisclosed.example.com) — 2020-04-24T07:49:23+00:00

Role by role catalogue evaluator 1.9.0only in LTS version The evaluator gives permissions for all roles that is inside defined catalogue or below. at least in one role catalogue that is accessible There is example of role catalogue and child's of the catalogue:

Send custom notification to identities

Anonymous (anonymous@undisclosed.example.com) — 2024-04-16T14:43:25+00:00

Send custom notification to identities Task uses script for search identities using pageable filter. First task finds users by script, for every identity sends notification to defined topic. How to use it Notification is implemented as long running task. You must go to Settings → Task scheduler → Scheduled tasks and in the agenda just plan new long running task with name send-notification-to-identities-by-script (SendNotificationToIdentitiesByScript).

Notification content

Anonymous (anonymous@undisclosed.example.com) — 2020-02-19T15:04:45+00:00

Notification content In status notification there are information about state of processes in CzechIdM. In CzechIdM there are asynchronous processes on many places. Advantage is that users do not have to wait for events, which are executed on the background. But on the other side users does not know the result of processes. This notification contains state of some vital agendas.

ContractSubordinateWithProjectionEvaluator and IdentitySubordinateWithProjectionEvaluator

Anonymous (anonymous@undisclosed.example.com) — 2020-06-24T11:37:24+00:00

ContractSubordinateWithProjectionEvaluator and IdentitySubordinateWithProjectionEvaluator These evaluators enable us to give user permission to their subordinates (and their contracts), which have set a specific form projection. Both evaluators take a single configuration attribute, which contains UUID of said form projection. User chooses from a select box when configuring these evaluators.

Notify about identity changes caused by synchronization

Anonymous (anonymous@undisclosed.example.com) — 2024-05-17T07:42:39+00:00

Notify about identity changes caused by synchronization This task sends notification about identity changes to interested recipients. It monitors changes caused by synchronization on selected systems and compiles them to single report, which is then sent to interested identites.

Synchronization of code list's items

Anonymous (anonymous@undisclosed.example.com) — 2021-07-29T06:54:04+00:00

Synchronization of code list's items Since extras 3.2.0 Purpose of this LRT is to enable synchronization of code list's items. Native suport for this is not in product yet. Please check the state of this ticket if this feature is already in product use native support instead.