• Votes

    2

    Use Business Role data for mapping permission in a multi affiliated ...

    Multi affiliation can be implemented in at least two ways: multi accounts one per affiliation, single account combining the affiliation permissions into one account. ...

  • Votes

    2

    Possibility to chose the source for email-address in Identity ...

    Identity Reporting notification takes the email address from the SSO provider. This does cause problems, if the SSO provider do not have updated email-addresses as an ...

  • Planned

    4

    Option to exclude "Keep" by category from the unmapped account review

    When doing an unmapped account review it should be possible to be able to exclude accounts that has been marked as "Keep" and assigned a category from the unmapped ...

  • Votes

    8

    Inactivate as an fulfillment options

    For some systems, especially finanse systems, an requirement is to be able to inactivate the account instead of removing the account. It is therefore requested to be ...

  • Votes

    3

    Multiple serial approvers for Business Roles

    For many approvals in IG, it is possible to have multiple approval stages e.g. for Access Request Approval Policies and for Reviewers. I is requested to have the same ...

  • Votes

    1

    This was flagged by mistake, so a new one has been created

    In the current version it is possible to setup delegation for reviews. It is requested that this functionality is enhanced to cover all kinds of approvals and actions ...

  • Votes

    4

    Delegation of all types of approvals and actions (request, ...

    In the current version it is possible to setup delegation for reviews. It is requested that this functionality is enhanced to cover all kinds of approvals and actions ...

  • Votes

    4

    Possibility to setup own delegation

    In the current version it is possible for an administrator to setup delegation for others. It is requested that users can setup delegation for themselves and to set an ...

  • Votes

    6

    Possibility to setup delegation on behalf of others

    In the current version it is possible for an administrator to setup delegation for others. It is requested to be possible to set a policy that allows certain users to ...

  • Votes

    1

    Multiple managers

    The current version only allow to have one manager. It is requested to allow multiple managers representing different organizational structures. It could be a matrix ...

  • Votes

    1

    Quorum reviewers and approvers

    When there are multiple reviewers e.g. a group, coverage map etc. it should be possible to configure quorum approval. The use case is, if an company have a multi ...

  • Votes

    3

    Check for Business Role violations when creating or changing SoD ...

    In the current version 3.0.1 it is possible to check for SoD violations for users and accounts when creating or changing a SoD policy. The request is to have the ...

  • Votes

    3

    Composite authorization - combining permission and data set views

    In many ERP and CRM systems the authority model is made by a combination of a general permission eg. read, write, delete etc. and the data set or data view for which the ...

  • Votes

    12

    Former review decisions showed in newer reviews

    When doing a review, it would be help to the reviewer if the reviewer can see former review decisions for the same review item. It could be a list like: Date and time ...

  • Votes

    3

    Access removal policy

    An Access Removal Policy can be used when a customer would like to have different policies for requesting and removing access. An example is, that for a certain access, ...

  • Votes

    4

    JSON application collector

    A customer has asked for a JSON application collector for both accounts and permissions.

  • Votes

    14

    Limit the application owners access to the catalog

    It should be possible to limit an application owners viewing access to the catalog to only information linked to the owner's specific application and not as today that ...

  • Votes

    1

    Collecting Account Category attribute in the account collector

    A customer has requested to be able to collect th Account Category on an account object during the application collection. The reason is for being able to minimize the ...

  • Planned

    11

    Delta review

    A customer has requested to be able to do delta reviews. If a full review is done every year, the customer would like to be able to make quarterly reviews of those items ...

  • Votes

    1

    Select all in Compare view

    If a manager would like to get a full view of his employee's accesses, he need to select his employees individually one by one. In order to make the selection easier and ...