{"data":{"allMdx":{"edges":[{"node":{"fields":{"slug":"/admin"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/appendix"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/changelog"},"tableOfContents":{"items":[{"url":"#release-42x","title":"Release 4.2.x"}]}}},{"node":{"fields":{"slug":"/connectorconfig"},"tableOfContents":{"items":[{"url":"#connector-specific-documentation","title":"Connector-specific documentation","items":[{"items":[{"url":"#common-infrastructure-connectors","title":"Common infrastructure connectors"},{"url":"#microsoft-applications","title":"Microsoft Applications"},{"url":"#erp-applications","title":"ERP Applications"},{"url":"#saas-applications","title":"SaaS Applications"},{"url":"#cloud-providers","title":"Cloud providers"}]}]}]}}},{"node":{"fields":{"slug":"/end-user-guide-for-selfservice"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/ssocatalog"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/getting-started"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/troubleshooting"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/developerguide"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/whatsnew"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/installation"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/0-login"},"tableOfContents":{"items":[{"url":"#logging-in-using-the-openiam-idp","title":"Logging in using the OpenIAM IdP"},{"url":"#logging-in-using-a-third-party-idp","title":"Logging in using a third-party IdP"}]}}},{"node":{"fields":{"slug":"/admin/1-exportimport"},"tableOfContents":{"items":[{"url":"#overview","title":"Overview"},{"url":"#configuration-file","title":"Configuration File"},{"url":"#supported-object-types","title":"Supported Object Types"},{"url":"#executing-the-script","title":"Executing the script"},{"url":"#recommendations","title":"Recommendations"}]}}},{"node":{"fields":{"slug":"/"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/1-usradmin"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/10-consent-management"},"tableOfContents":{"items":[{"url":"#configuring-consent-in-openiam","title":"Configuring consent in OpenIAM"},{"url":"#user-interaction","title":"User interaction","items":[{"url":"#reviewing-consent-history","title":"Reviewing consent history"}]}]}}},{"node":{"fields":{"slug":"/admin/10-password"},"tableOfContents":{"items":[{"url":"#password-policy-overview","title":"Password policy overview"},{"url":"#password-policy-composition","title":"Password policy composition"},{"url":"#forgot-password-parameter","title":"Forgot password parameter"},{"url":"#password-change-rule","title":"Password change rule"},{"url":"#multiple-password-policies","title":"Multiple password policies"},{"url":"#appendix-1","title":"Appendix 1"}]}}},{"node":{"fields":{"slug":"/admin/12-administration"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/13-selfregistration"},"tableOfContents":{"items":[{"url":"#create-new-self-registration-configuration","title":"Create new self-registration configuration"},{"url":"#modify-existing-self-registration-configurations","title":"Modify existing self-registration configurations"}]}}},{"node":{"fields":{"slug":"/admin/15-audit"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/14-Help.Desk.User.Profile.Protection"},"tableOfContents":{"items":[{"url":"#overview","title":"Overview"},{"url":"#help-desk-questions","title":"Help desk questions"},{"url":"#example","title":"Example"},{"url":"#user-secret","title":"User secret"},{"url":"#configuration","title":"Configuration"},{"url":"#audit-logging","title":"Audit logging"},{"url":"#challenge-response--helpdesk","title":"Challenge response & HelpDesk"}]}}},{"node":{"fields":{"slug":"/admin/18-services-passwd-change-k8"},"tableOfContents":{"items":[{"url":"#redis-passwords","title":"Redis passwords"},{"url":"#elasticsearch-passwords","title":"Elasticsearch passwords"},{"url":"#rabbitmq-passwords","title":"RabbitMQ passwords"}]}}},{"node":{"fields":{"slug":"/admin/2-authentication"},"tableOfContents":{"items":[{"url":"#configuring-authentication-overview","title":"Configuring authentication overview"},{"url":"#authentication-methods","title":"Authentication methods"}]}}},{"node":{"fields":{"slug":"/admin/20-virtual-tentant-by-org"},"tableOfContents":{"items":[{"url":"#prerequisites","title":"Prerequisites"},{"url":"#operation-overview","title":"Operation overview"},{"url":"#example-scenario","title":"Example scenario"},{"url":"#troubleshooting-limited-visibility","title":"Troubleshooting limited visibility"}]}}},{"node":{"fields":{"slug":"/admin/21-graph-rebuild"},"tableOfContents":{"items":[{"url":"#for-end-users--system-administrators","title":"For end-users / System administrators","items":[{"url":"#how-to-trigger","title":"How to trigger?"},{"url":"#expected-behavior","title":"Expected behavior"},{"url":"#monitoring-progress","title":"Monitoring progress"}]},{"url":"#for-developers","title":"For Developers","items":[{"url":"#rest-entry-point","title":"REST Entry Point"},{"url":"#full-call-chain","title":"Full call chain"},{"url":"#graph-rebuild-detail","title":"Graph rebuild detail","items":[{"url":"#error-handling","title":"Error Handling"}]},{"url":"#startup-behavior","title":"Startup behavior"},{"url":"#sql-queries-used-during-rebuild","title":"SQL queries used during rebuild","items":[{"url":"#entity-queries","title":"Entity queries"},{"url":"#membership-edge-query","title":"Membership (Edge) query"},{"url":"#membership-rights-query","title":"Membership rights query"},{"url":"#summary-of-tables-read","title":"Summary of tables read"}]},{"url":"#edge_id-lifecycle","title":"EDGE_ID Lifecycle"},{"url":"#graph_id-lifecycle","title":"GRAPH_ID Lifecycle"},{"url":"#key-classes","title":"Key classes"},{"url":"#caches-cleared-during-rebuild","title":"Caches cleared during rebuild"},{"url":"#graph-technology","title":"Graph technology"},{"url":"#thread-safety","title":"Thread safety"}]}]}}},{"node":{"fields":{"slug":"/admin/3-authz"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/22-token-session-util"},"tableOfContents":{"items":[{"url":"#available-actions","title":"Available actions"},{"url":"#example-behavior","title":"Example behavior"}]}}},{"node":{"fields":{"slug":"/admin/4-app-onboarding"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/16-admin-pswd-change"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/19-reports"},"tableOfContents":{"items":[{"url":"#common-considerations-about-reports","title":"Common considerations about reports"},{"url":"#configuring-report-generation","title":"Configuring report generation"},{"url":"#reports-available-in-openiam","title":"Reports available in OpenIAM","items":[{"url":"#user_report","title":"USER_REPORT"},{"url":"#user_access_report","title":"USER_ACCESS_REPORT"},{"url":"#request_report","title":"REQUEST_REPORT"},{"url":"#resource_usage_report","title":"RESOURCE_USAGE_REPORT"},{"url":"#last_login_report","title":"LAST_LOGIN_REPORT"},{"url":"#access_certification_report","title":"ACCESS_CERTIFICATION_REPORT"},{"url":"#user_life_cycle_activities","title":"USER_LIFE_CYCLE_ACTIVITIES"},{"url":"#orphaned_user_accounts","title":"ORPHANED_USER_ACCOUNTS"},{"url":"#audit_report","title":"AUDIT_REPORT"},{"url":"#generic_request_report","title":"GENERIC_REQUEST_REPORT"},{"url":"#entitlements_membership_report","title":"ENTITLEMENTS_MEMBERSHIP_REPORT"},{"url":"#entitlements_report","title":"ENTITLEMENTS_REPORT"},{"url":"#provision_failure_report","title":"PROVISION_FAILURE_REPORT"},{"url":"#terminated_user_report","title":"TERMINATED_USER_REPORT"}]},{"url":"#troubleshooting-tips","title":"Troubleshooting tips"}]}}},{"node":{"fields":{"slug":"/admin/6-requestapprov"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/5-lifecycle"},"tableOfContents":{"items":[{"url":"#life-cycle-management-in-openiam","title":"Life cycle management in OpenIAM"},{"url":"#configuring-automated-life-cycle-management","title":"Configuring automated life cycle management"}]}}},{"node":{"fields":{"slug":"/admin/8-sso"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/9-r-Proxy"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/appendix/1-self-signedcert"},"tableOfContents":{"items":[{"url":"#create-a-local-root-ca","title":"Create a local root CA"},{"url":"#generate-a-self-signed-cert","title":"Generate a self-signed cert"},{"url":"#create-a-config-file-with-the-following-content","title":"Create a config file with the following content"}]}}},{"node":{"fields":{"slug":"/admin/7-access-cert"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/appendix/2-openssl"},"tableOfContents":{"items":[{"url":"#rhel--centos-8x","title":"RHEL / CentOS 8.x"},{"url":"#ubuntu-2004-lts","title":"Ubuntu 20.04 LTS","items":[{"items":[{"url":"#install-dependencies","title":"Install dependencies"},{"url":"#download-openssl","title":"Download OpenSSL"},{"url":"#install-and-compile-openssl","title":"Install and compile OpenSSL"},{"url":"#configure-link-libraries","title":"Configure link libraries"},{"url":"#configure-openssl-binary","title":"Configure OpenSSL Binary"},{"url":"#validate-the-version","title":"Validate the version"}]}]}]}}},{"node":{"fields":{"slug":"/appendix/4-prepforprod"},"tableOfContents":{"items":[{"url":"#enable-https","title":"Enable HTTPS"},{"url":"#update-your-password-policy","title":"Update your password policy"},{"url":"#update-your-authentication-policy","title":"Update your authentication policy"},{"url":"#remove-default-users","title":"Remove default users"},{"url":"#replace-system-admin-accounts","title":"Replace system admin accounts"},{"url":"#remove-default-entitlement-objects","title":"Remove default entitlement objects","items":[{"url":"#remove-roles","title":"Remove roles"},{"url":"#remove-default-groups","title":"Remove default groups"},{"url":"#remove-all-organization-objects","title":"Remove all organization objects"}]}]}}},{"node":{"fields":{"slug":"/changelog/12-Release-4.2.1.6"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/changelog/13-Release-4.2.1.7"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/changelog/14-Release-4.2.1.8"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/changelog/11-Release-4.2.1.5"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/changelog/15-Release-4.2.1.9"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/appendix/3-installopenldap"},"tableOfContents":{"items":[{"url":"#install-openldap","title":"Install OpenLDAP","items":[{"url":"#validate-that-your-directory-is-running","title":"Validate that your directory is running"}]},{"url":"#populate-your-directory","title":"Populate your directory"},{"url":"#ldap-search-examples","title":"LDAP Search examples"},{"url":"#secure-your-directory","title":"Secure your directory","items":[{"items":[{"url":"#generate-a-self-signed-certificate","title":"Generate a self-signed certificate"},{"url":"#configure-ssl-on-openldap","title":"Configure SSL on OpenLDAP"},{"url":"#configure-ldap-client","title":"Configure LDAP Client"}]}]}]}}},{"node":{"fields":{"slug":"/changelog/18-Release-4.2.1.12"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/changelog/16-Release-4.2.1.10"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/changelog/17-Release-4.2.1.11"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/changelog/20-Release-4.2.1.14"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/changelog/21-Release-4.2.1.15"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/changelog/22-v2026.1.1"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/connectorconfig/2-configparam"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/connectorconfig/4-troubleshootingconnector"},"tableOfContents":{"items":[{"url":"#identity-status-remains-as-pending_","title":"Identity status remains as PENDING_*"},{"url":"#sync-via-connector-connection-doesnt-return-values","title":"Sync via connector connection doesn't return values"}]}}},{"node":{"fields":{"slug":"/connectorconfig/JDBC"},"tableOfContents":{"items":[{"url":"#configuring-managed-system","title":"Configuring Managed system"},{"url":"#attribute-mapping","title":"Attribute mapping"},{"url":"#policy-map-configuration","title":"Policy map configuration"},{"url":"#synchronization-configuration","title":"Synchronization configuration"}]}}},{"node":{"fields":{"slug":"/connectorconfig/LDAP"},"tableOfContents":{"items":[{"url":"#installing-the-connector","title":"Installing the connector","items":[{"url":"#rpm-file","title":"RPM File"},{"url":"#docker-swarm","title":"Docker Swarm"},{"url":"#kubernetes","title":"Kubernetes"}]},{"url":"#synchronization","title":"Synchronization"},{"url":"#enabling-attributes-in-ldap-connector","title":"Enabling attributes in LDAP connector"},{"url":"#configuring-managed-system","title":"Configuring managed system"},{"url":"#connector-troubleshooting-tips","title":"Connector troubleshooting tips","items":[{"url":"#ssl-connection-issue","title":"SSL connection issue"}]}]}}},{"node":{"fields":{"slug":"/connectorconfig/SAPUME"},"tableOfContents":{"items":[{"url":"#connector-usage","title":"Connector usage","items":[{"items":[{"url":"#requirements-for-the-sap-ume-connector","title":"Requirements for the SAP UME Connector"}]}]},{"url":"#installing-sap-ume-connector","title":"Installing SAP UME Connector"},{"url":"#reconciliation","title":"Reconciliation","items":[{"url":"#users","title":"Users"},{"url":"#groups-and-roles","title":"Groups and roles"}]}]}}},{"node":{"fields":{"slug":"/connectorconfig/adp"},"tableOfContents":{"items":[{"url":"#configuring-managed-system","title":"Configuring Managed system"},{"url":"#synchronization","title":"Synchronization"}]}}},{"node":{"fields":{"slug":"/connectorconfig/aerospike"},"tableOfContents":{"items":[{"url":"#connecting","title":"Connecting"},{"url":"#creating-users","title":"Creating users"},{"url":"#searching-users","title":"Searching users"},{"url":"#searching-groups","title":"Searching groups"}]}}},{"node":{"fields":{"slug":"/changelog/19-Release-4.2.1.13"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/connectorconfig/linux"},"tableOfContents":{"items":[{"url":"#configure-linux-os","title":"Configure Linux OS","items":[{"url":"#create-linux-user-for-password-authentication","title":"Create Linux user for password authentication"},{"url":"#create-linux-user-for-certificate-authentication","title":"Create linux user for certificate authentication"}]},{"url":"#openiam","title":"OpenIAM","items":[{"url":"#1-connector-settings","title":"1 Connector settings"},{"url":"#2-managed-system-settings","title":"2 Managed system settings","items":[{"url":"#example","title":"Example"}]}]},{"url":"#3-user-policy-map","title":"3. User policy map","items":[{"items":[{"url":"#for-v421-was-added-new-field--for-provision-ssh-keys-","title":"For v.4.2.1 was added new field  for provision ssh keys :"},{"url":"#default-groovy-for-this-field-","title":"default groovy for this field :"}]}]},{"url":"#4-synchronization-settings-","title":"4. Synchronization settings :","items":[{"items":[{"url":"#required-fields-on-managed-system-page-","title":"Required fields on Managed system page :"},{"url":"#example-sync-configuration-page-","title":"Example sync configuration page :"},{"url":"#provision-to-target-systems","title":"Provision to target systems?"},{"url":"#example-","title":"Example :"}]}]},{"url":"#5-reconciliation","title":"5. Reconciliation"},{"url":"#6-linux-ssh-commands-used-in-connector","title":"6. Linux ssh commands used in connector"},{"url":"#7-ssh-key-manager","title":"7. SSH Key manager"}]}}},{"node":{"fields":{"slug":"/connectorconfig/microsoft"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/connectorconfig/aws"},"tableOfContents":{"items":[{"url":"#establishing-a-connection","title":"Establishing a connection","items":[{"url":"#policy-map","title":"Policy map"}]},{"url":"#synchronization","title":"Synchronization"}]}}},{"node":{"fields":{"slug":"/connectorconfig/oracle"},"tableOfContents":{"items":[{"url":"#general-information","title":"General information"},{"url":"#installation-and-connection-to-openiam","title":"Installation and connection to OpenIAM"},{"url":"#general-usage","title":"General usage","items":[{"items":[{"items":[{"url":"#connector-settings","title":"Connector settings"},{"url":"#managed-system-settings","title":"Managed system settings"}]}]}]},{"url":"#steps-to-be-performed-on-oracle-db-side","title":"Steps to be performed on Oracle DB side"},{"url":"#synchronization","title":"Synchronization"},{"url":"#oracle-scripts-behind-the-scenes","title":"Oracle scripts behind the scenes","items":[{"items":[{"items":[{"url":"#additional-information","title":"Additional information"}]}]}]},{"url":"#connector-troubleshooting-and-tips","title":"Connector Troubleshooting and Tips"}]}}},{"node":{"fields":{"slug":"/connectorconfig/oracleebs"},"tableOfContents":{"items":[{"url":"#general-information","title":"General information"},{"url":"#installation-and-connection-to-openiam","title":"Installation and connection to OpenIAM"},{"url":"#general-usage","title":"General usage"},{"url":"#steps-to-be-performed-on-the-oracle-ebs-side","title":"Steps to be performed on the Oracle EBS side"},{"url":"#define-an-attribute-provisioning-rules","title":"Define an attribute provisioning rules"},{"url":"#synchronization","title":"Synchronization"},{"url":"#connector-troubleshooting-and-tips","title":"Connector Troubleshooting and Tips"}]}}},{"node":{"fields":{"slug":"/connectorconfig/postgresql"},"tableOfContents":{"items":[{"url":"#installing-the-connector","title":"Installing the connector","items":[{"url":"#docker-swarm","title":"Docker swarm"}]},{"url":"#general-information","title":"General information"},{"url":"#configuring-connector","title":"Configuring connector"},{"url":"#configuring-managed-system","title":"Configuring managed system"},{"url":"#postgresql-user-privileges","title":"PostgreSQL user privileges"}]}}},{"node":{"fields":{"slug":"/connectorconfig/rexx"},"tableOfContents":{"items":[{"url":"#installing-the-connector","title":"Installing the connector","items":[{"url":"#docker-swarm","title":"Docker swarm"}]},{"url":"#general-information","title":"General information"},{"url":"#configuring-managed-system","title":"Configuring managed system"},{"url":"#rexx-provisioning","title":"Rexx provisioning"}]}}},{"node":{"fields":{"slug":"/connectorconfig/gsuite"},"tableOfContents":{"items":[{"url":"#pre-configuration-steps","title":"Pre-configuration steps","items":[{"items":[{"items":[{"url":"#1-in-google-workspace-create-the-service-account-and-its-credentials-by-clicking-on-the-following-link","title":"1. In Google Workspace, create the service account and its credentials by clicking on the following link:"},{"url":"#2-add-scopes-for-your-service-account","title":"2. Add scopes for your service account."}]}]}]},{"url":"#configuring-openiam","title":"Configuring OpenIAM","items":[{"items":[{"items":[{"url":"#1-in-webconsole-click-on-the-provisioning-tab-and-select-managed-system","title":"1. In Webconsole, click on the Provisioning tab and select Managed System."},{"url":"#2-fill-out-information","title":"2. Fill out information"}]}]},{"url":"#provision-to-google-sample-example","title":"Provision to Google (Sample Example)"},{"url":"#synchronization-from-google-sample-example","title":"Synchronization from Google (Sample Example)"}]}]}}},{"node":{"fields":{"slug":"/connectorconfig/scim"},"tableOfContents":{"items":[{"url":"#connector-registration","title":"Connector Registration"},{"url":"#define-the-managed-system-configuration","title":"Define the Managed System Configuration"},{"url":"#examples","title":"Examples","items":[{"url":"#slack","title":"Slack"},{"url":"#atlassian","title":"Atlassian"}]}]}}},{"node":{"fields":{"slug":"/connectorconfig/sap"},"tableOfContents":{"items":[{"url":"#general-information","title":"General information"},{"url":"#requirements","title":"Requirements"},{"url":"#installation-and-connection-to-openiam","title":"Installation and connection to OpenIAM"},{"url":"#installation-and-connection-to-openiam-when-openiam-is-deployed-in-docker","title":"Installation and connection to OpenIAM when OpenIAM is deployed in Docker"},{"url":"#general-usage","title":"General usage"},{"url":"#define-attribute-provisioning-rules","title":"Define attribute provisioning rules"},{"url":"#synchronization","title":"Synchronization"},{"url":"#connector-troubleshooting-and-tips","title":"Connector troubleshooting and tips"},{"url":"#video-tutorial","title":"Video tutorial"},{"url":"#how-to-find-and-validate-user-in-sap","title":"How to find and validate user in SAP"}]}}},{"node":{"fields":{"slug":"/connectorconfig/scriptConnector"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/connectorconfig/tableau"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/developerguide/10-OpenIAM-opensource-rep"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/connectorconfig/workday"},"tableOfContents":{"items":[{"url":"#installing-the-connector","title":"Installing the connector","items":[{"url":"#docker-swarm","title":"Docker swarm"}]},{"url":"#connector-configuration","title":"Connector configuration"}]}}},{"node":{"fields":{"slug":"/developerguide/1-custom-css"},"tableOfContents":{"items":[{"items":[{"url":"#what-can-be-customized-using-css","title":"What can be customized using CSS?"}]},{"url":"#customizing-branding-in-docker-environment","title":"Customizing branding in Docker environment","items":[{"items":[{"url":"#configuring-the-ui-theme","title":"Configuring the UI Theme"},{"url":"#assigning-the-theme-to-the-content-provider","title":"Assigning the theme to the Content provider"},{"url":"#selecting-an-ui-theme-for-the-uri-pattern","title":"Selecting an UI theme for the URI pattern"},{"url":"#updating-css","title":"Updating CSS"}]}]},{"url":"#customizing-branding-in-kubernetes-environment","title":"Customizing branding in Kubernetes environment","items":[{"items":[{"url":"#infrastructure-preparation","title":"Infrastructure preparation"},{"url":"#using-your-own-static-content","title":"Using your own static content"}]}]},{"url":"#getting-started-with-css","title":"Getting started with CSS","items":[{"items":[{"url":"#updating-a-logo","title":"Updating a logo"},{"url":"#changing-a-background","title":"Changing a background"},{"url":"#changing-footer-and-copyrights","title":"Changing footer and copyrights"}]}]},{"url":"#uploading-static-content","title":"Uploading static content","items":[{"url":"#docker-environment","title":"Docker environment"},{"url":"#rpm-environment","title":"RPM environment"}]}]}}},{"node":{"fields":{"slug":"/developerguide/3-whitelisting"},"tableOfContents":{"items":[{"url":"#whitelisting-packages-in-rpm","title":"Whitelisting packages in RPM"},{"url":"#whitelisting-packages-in-docker-compose","title":"Whitelisting packages in Docker Compose"},{"url":"#whitelisting-packages-in-kubernetes","title":"Whitelisting packages in Kubernetes"}]}}},{"node":{"fields":{"slug":"/developerguide/4-scheduledtasks"},"tableOfContents":{"items":[{"url":"#running-a-shell-script-with-a-batch-task","title":"Running a shell script with a batch task"},{"url":"#out-of-the-box-tasks","title":"Out-of-the-box tasks"}]}}},{"node":{"fields":{"slug":"/connectorconfig/freeIPA"},"tableOfContents":{"items":[{"url":"#connector-operations","title":"Connector operations"},{"url":"#configuring-managed-system","title":"Configuring Managed system"},{"url":"#synchronization","title":"Synchronization"}]}}},{"node":{"fields":{"slug":"/developerguide/5-datamodel"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/developerguide/2-api"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/developerguide/9-synchronization"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/end-user-guide-for-selfservice/1-login"},"tableOfContents":{"items":[{"url":"#logging-in-using-the-openiam-idp","title":"Logging in using the OpenIAM IdP"},{"url":"#logging-in-using-a-third-party-idp","title":"Logging in using a third party IdP"}]}}},{"node":{"fields":{"slug":"/end-user-guide-for-selfservice/2-selfservice"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/end-user-guide-for-selfservice/7-useraccess"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/end-user-guide-for-selfservice/4-createrequest"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/getting-started/1-what_is_openiam"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/getting-started/2-productarchitecture"},"tableOfContents":{"items":[{"url":"#background","title":"Background","items":[{"url":"#one-openiam","title":"One OpenIAM"}]},{"url":"#logical-architecture","title":"Logical Architecture","items":[{"items":[{"url":"#messaging","title":"Messaging"},{"url":"#caching","title":"Caching"},{"url":"#opensearch","title":"Opensearch"},{"url":"#workflow-engine","title":"Workflow engine"},{"url":"#groovy-script-manager","title":"Groovy script manager"},{"url":"#scheduler","title":"Scheduler"},{"url":"#device-manager","title":"Device Manager"},{"url":"#vault","title":"Vault"},{"url":"#flyway","title":"Flyway"},{"url":"#shared-services","title":"Shared Services"},{"url":"#identity-management-services","title":"Identity management services"}]},{"url":"#presentation-layer","title":"Presentation layer","items":[{"url":"#access-gateway","title":"Access Gateway"},{"url":"#identity-provider-and-authentication","title":"Identity Provider and authentication"},{"url":"#administration-portal","title":"Administration portal"},{"url":"#selfservice-portal","title":"SelfService portal"}]}]}]}}},{"node":{"fields":{"slug":"/getting-started/3-install_openiam"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/end-user-guide-for-selfservice/6-singlesignon"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/getting-started/21-concepts"},"tableOfContents":{"items":[{"url":"#overview","title":"Overview"},{"url":"#user-versus-identity","title":"User versus identity"},{"url":"#provisioning","title":"Provisioning"},{"url":"#provisioning-status-versus-identity-status","title":"Provisioning status versus identity status"},{"url":"#synchronization","title":"Synchronization"},{"url":"#reconciliation","title":"Reconciliation"},{"url":"#connector","title":"Connector"},{"url":"#managed-system","title":"Managed system"},{"url":"#content-provider","title":"Content provider"}]}}},{"node":{"fields":{"slug":"/getting-started/5-connecting"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/developerguide/6-ide"},"tableOfContents":{"items":[{"url":"#prerequisites","title":"Prerequisites"},{"url":"#create-a-new-project","title":"Create a New Project"}]}}},{"node":{"fields":{"slug":"/getting-started/4-application-onboarding"},"tableOfContents":{"items":[{"url":"#automated-applications","title":"Automated applications"},{"url":"#manual-applications","title":"Manual applications"}]}}},{"node":{"fields":{"slug":"/getting-started/7-selfservice-pswd"},"tableOfContents":{"items":[{"url":"#configure-smtp-and-sms","title":"Configure SMTP and SMS"},{"url":"#password-policy","title":"Password policy"},{"url":"#resetting-the-password","title":"Resetting the password"}]}}},{"node":{"fields":{"slug":"/getting-started/31-planning-workforce"},"tableOfContents":{"items":[{"url":"#identity-governance-and-administration-iga-project-discovery-questions","title":"Identity Governance and Administration (IGA) Project Discovery Questions","items":[{"url":"#document-information","title":"Document Information"},{"url":"#project-drivers","title":"Project Drivers"},{"url":"#organization-information","title":"Organization Information"},{"url":"#project-overview","title":"Project Overview","items":[{"url":"#openiam-specific-considerations","title":"OpenIAM-Specific Considerations"}]},{"url":"#user-population-assessment","title":"User Population Assessment","items":[{"url":"#user-types-definition","title":"User Types Definition"}]},{"url":"#identity-lifecycle-management","title":"Identity Lifecycle Management","items":[{"url":"#authoritative-sources","title":"Authoritative Sources"},{"url":"#joiner-process","title":"Joiner Process","items":[{"url":"#accountattribute-generation-rules","title":"Account/Attribute Generation Rules"},{"url":"#credential-delivery","title":"Credential Delivery"},{"url":"#future-hire-processing","title":"Future Hire Processing"},{"url":"#joiner-process-flow","title":"Joiner Process Flow"}]},{"url":"#mover-process","title":"Mover Process","items":[{"url":"#position-change-attributes","title":"Position Change Attributes"},{"url":"#special-cases","title":"Special Cases"},{"url":"#mover-process-flow","title":"Mover Process Flow"}]},{"url":"#leaver-process","title":"Leaver Process","items":[{"url":"#termination-types","title":"Termination Types"},{"url":"#account-disposition","title":"Account Disposition"},{"url":"#reuse-policies","title":"Reuse Policies"},{"url":"#leaver-process-flow","title":"Leaver Process Flow"}]},{"url":"#account-management","title":"Account Management"}]},{"url":"#birthright-access-definition","title":"Birthright Access Definition"},{"url":"#access-request-and-approval","title":"Access Request and Approval","items":[{"url":"#service-catalog-structure","title":"Service Catalog Structure"},{"url":"#application-specific-approval-workflows","title":"Application-Specific Approval Workflows"},{"url":"#role-management","title":"Role Management"},{"url":"#business-role-definitions","title":"Business Role Definitions"},{"url":"#role-hierarchy","title":"Role Hierarchy"}]},{"url":"#user-access-certification-and-review","title":"User Access Certification and Review","items":[{"url":"#certification-campaigns","title":"Certification Campaigns"},{"url":"#access-review-manager","title":"Access Review Manager"},{"url":"#segregation-of-duties-sod","title":"Segregation of Duties (SoD)"}]},{"url":"#authentication-and-credentials","title":"Authentication and Credentials","items":[{"url":"#authentication-methods","title":"Authentication Methods"},{"url":"#password-management","title":"Password Management"},{"url":"#password-policy-details","title":"Password Policy Details"},{"url":"#self-service-password-reset-options","title":"Self-Service Password Reset Options"}]},{"url":"#single-sign-on-and-federation","title":"Single Sign-On and Federation","items":[{"url":"#sso-application-requirements","title":"SSO Application Requirements"},{"url":"#federation-count-by-protocol","title":"Federation Count by Protocol"},{"url":"#external-federation-requirements","title":"External Federation Requirements"}]},{"url":"#system-integrations","title":"System Integrations","items":[{"url":"#authoritative-sources-1","title":"Authoritative Sources"},{"url":"#target-systems","title":"Target Systems"},{"url":"#integration-challenges","title":"Integration Challenges"}]},{"url":"#governance-and-compliance","title":"Governance and Compliance","items":[{"url":"#regulatory-requirements","title":"Regulatory Requirements"},{"url":"#reporting-and-audit","title":"Reporting and Audit"},{"url":"#specific-report-requirements","title":"Specific Report Requirements"},{"url":"#audit-requirements","title":"Audit Requirements"},{"url":"#risk-management","title":"Risk Management"}]},{"url":"#user-experience-and-self-service","title":"User Experience and Self-Service","items":[{"url":"#self-service-capabilities-by-user-type","title":"Self-Service Capabilities by User Type"},{"url":"#notification-requirements","title":"Notification Requirements"},{"url":"#openiam-implementation-considerations","title":"OpenIAM Implementation Considerations"}]},{"url":"#operational-requirements","title":"Operational Requirements","items":[{"url":"#deployment-model","title":"Deployment Model"},{"url":"#support-and-maintenance","title":"Support and Maintenance"},{"url":"#environment-requirements","title":"Environment Requirements"}]},{"url":"#implementation-approach","title":"Implementation Approach","items":[{"url":"#implementation-roles-and-responsibilities","title":"Implementation Roles and Responsibilities"}]},{"url":"#additional-requirements","title":"Additional Requirements"},{"url":"#special-use-cases","title":"Special Use Cases"},{"url":"#api-and-integration-requirements","title":"API and Integration Requirements"},{"url":"#appendix-current-state-assessment","title":"Appendix: Current State Assessment"}]}]}}},{"node":{"fields":{"slug":"/getting-started/9-openiam-as-IdP"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/getting-started/8-openiam-with-IdP"},"tableOfContents":{"items":[{"url":"#configuring-sso","title":"Configuring SSO"},{"url":"#integrating-openiam-with-idp","title":"Integrating OpenIAM with IdP"}]}}},{"node":{"fields":{"slug":"/getting-started/99-multifactor-authentication"},"tableOfContents":{"items":[{"url":"#configuring-sms-and-smtp","title":"Configuring SMS and SMTP"},{"url":"#configuring-authentication-policy","title":"Configuring authentication policy"},{"url":"#associating-with-a-content-provider","title":"Associating with a content provider"}]}}},{"node":{"fields":{"slug":"/getting-started/6-automatedprovisioning"},"tableOfContents":{"items":[{"url":"#provisioning-overview","title":"Provisioning overview","items":[{"items":[{"url":"#provisioning-dataflow","title":"Provisioning dataflow"}]}]},{"url":"#automated-user-life-cycle-overview","title":"Automated user life cycle overview"},{"url":"#provisioning-matrix","title":"Provisioning Matrix"},{"url":"#deprovisioning","title":"Deprovisioning"}]}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/installation/6-kubernetes-installation"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/installation/7-OpenShift-installation"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/installation/2-docker-installation"},"tableOfContents":{"items":[{"items":[{"items":[{"items":[{"url":"#what-is-docker","title":"What is Docker?"}]}]}]},{"url":"#openiam-on-docker","title":"OpenIAM on Docker"},{"url":"#openiam-solution-stacks","title":"OpenIAM solution stacks","items":[{"url":"#critical-infrastructure-stacks","title":"Critical infrastructure stacks"},{"url":"#service-stacks","title":"Service stacks"},{"url":"#ui-stack","title":"UI Stack"},{"url":"#reverse-proxy-stack","title":"Reverse Proxy Stack"}]},{"url":"#system-requirements","title":"System requirements","items":[{"url":"#minimum-hardware-requirements","title":"MINIMUM hardware requirements"},{"url":"#software-requirements","title":"Software requirements"}]},{"url":"#preparing-your-system","title":"Preparing your system","items":[{"url":"#install-pre-requisite-packages","title":"Install pre-requisite packages"},{"url":"#update-the-hosts-file","title":"Update the hosts’ file"},{"url":"#settings-for-opensearch-and-docker","title":"Settings for OpenSearch and Docker","items":[{"url":"#opensearch","title":"OpenSearch"},{"url":"#disabling-ipv6-on-docker-host","title":"Disabling IPv6 on Docker Host"}]}]},{"url":"#install-the-docker-engine","title":"Install the Docker engine","items":[{"url":"#ubuntu","title":"Ubuntu","items":[{"url":"#setup-the-repository","title":"Setup the repository"},{"url":"#install-the-docker-engine-1","title":"Install the Docker engine"}]},{"url":"#centos-9-stream--rhel-9","title":"CentOS 9 Stream / RHEL 9","items":[{"url":"#setup-the-repository-1","title":"Setup the repository"},{"url":"#install-the-docker-engine-2","title":"Install the Docker engine"},{"url":"#install-docker-compose","title":"Install Docker compose"},{"url":"#verify-that-docker-engine-is-installed-correctly","title":"Verify that Docker engine is installed correctly"}]},{"url":"#enable-cgroups-v1-support-on-ubuntu-2404-lts","title":"Enable cgroups-v1 support on Ubuntu 24.04 LTS"}]},{"url":"#configuring-port-assignments-in-openiam-docker-deployment-optional","title":"Configuring Port Assignments in OpenIAM Docker Deployment (Optional)","items":[{"url":"#reverse-proxy-port-configuration","title":"Reverse Proxy Port Configuration"},{"url":"#exposing-ui-service-port","title":"Exposing UI Service Port","items":[{"url":"#steps-to-expose-the-ui-service-port","title":"Steps to Expose the UI Service Port"}]}]},{"url":"#installing-the-openiam-application","title":"Installing the OpenIAM application","items":[{"url":"#clone-the-openiam-docker-repository","title":"Clone the OpenIAM Docker repository"},{"url":"#set-the-community-edition-flag","title":"Set the community edition flag"},{"url":"#initialize-vault","title":"Initialize Vault"},{"url":"#define-database-ports","title":"Define database ports"},{"url":"#initialize-docker-swarm","title":"Initialize Docker Swarm"},{"url":"#open-ports-for-docker-swarm","title":"Open ports for Docker Swarm"},{"url":"#pull-the-docker-images","title":"Pull the Docker images"},{"url":"#start-the-openiam-application","title":"Start the OpenIAM application","items":[{"url":"#watch-the-container-startup-process","title":"Watch the container startup process"},{"url":"#validate-the-startup","title":"Validate the startup"}]}]},{"url":"#first-time-login","title":"First time login"},{"url":"#frequently-used-commands-with-docker","title":"Frequently used commands with Docker","items":[{"items":[{"url":"#additional-resources","title":"Additional resources"}]}]}]}}},{"node":{"fields":{"slug":"/installation/8-sizing"},"tableOfContents":{"items":[{"url":"#use-case-workforce-identity---iga","title":"Use case: Workforce identity - IGA"}]}}},{"node":{"fields":{"slug":"/installation/9-miscellaneous"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/ssocatalog/AWS"},"tableOfContents":{"items":[{"url":"#aws-is-sp-and-openiam-is-idp","title":"AWS is SP and OpenIAM is IDP","items":[{"url":"#configure-openiam-authentication-provider","title":"Configure OpenIAM Authentication provider"},{"url":"#configure-aws-entities","title":"Configure AWS entities"},{"url":"#configure-user-access-to-sso-in-openiam","title":"Configure user access to SSO in OpenIAM"}]},{"url":"#aws-is-idp-and-openiam-is-sp","title":"AWS is IDP and OpenIAM is SP","items":[{"url":"#configure-aws-idp","title":"Configure AWS IDP"},{"url":"#configure-openiam-sp","title":"Configure OpenIAM SP"},{"url":"#configure-user-access-to-sso-in-openiam-1","title":"Configure user access to SSO in OpenIAM"}]}]}}},{"node":{"fields":{"slug":"/ssocatalog/Gsuite"},"tableOfContents":{"items":[{"url":"#configure-gsuite","title":"Configure GSuite"},{"url":"#configure-openiam-authentication-provider","title":"Configure OpenIAM Authentication provider"}]}}},{"node":{"fields":{"slug":"/ssocatalog/Freshdesk"},"tableOfContents":{"items":[{"url":"#generate-public-key-and-private-key-pair","title":"Generate public key and private key pair"},{"url":"#enabling-saml-single-sign-on-in-freshdesk","title":"Enabling SAML Single Sign on in Freshdesk"},{"url":"#configuring-openiam","title":"Configuring OpenIAM"}]}}},{"node":{"fields":{"slug":"/installation/9-data_migration"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/ssocatalog/Azure"},"tableOfContents":{"items":[{"url":"#azure-is-idp-and-openiam-is-sp","title":"Azure is IDP and OpenIAM is SP","items":[{"items":[{"url":"#configuring-azure","title":"Configuring Azure"},{"url":"#configuring-openiam","title":"Configuring OpenIAM"}]},{"url":"#uploadingupdating-the-azure-sso-certificate-in-openiam","title":"Uploading/Updating the Azure SSO Certificate in OpenIAM","items":[{"url":"#validating-configuration","title":"Validating configuration"},{"url":"#additional-information","title":"Additional information"}]}]},{"url":"#azure-is-sp-and-openiam-is-idp","title":"Azure is SP and OpenIAM is IDP","items":[{"items":[{"items":[{"url":"#verifying-federation-parameters","title":"Verifying federation parameters"},{"url":"#removing-federation-configuration","title":"Removing federation configuration"}]}]},{"url":"#user-sign-on-requirements","title":"User sign on requirements"},{"url":"#troubleshooting","title":"Troubleshooting"}]},{"url":"#just-in-time-provisioning","title":"Just-In-Time provisioning"}]}}},{"node":{"fields":{"slug":"/ssocatalog/Office365"},"tableOfContents":{"items":[{"url":"#add-o365-as-an-authentication-provider-to-openiam","title":"Add o365 as an Authentication Provider to OpenIAM"},{"url":"#add-openiam-as-an-idp-to-your-o365-tenant","title":"Add OpenIAM as an IdP to your o365 Tenant"},{"url":"#granting-sso-for-user","title":"Granting SSO for User"}]}}},{"node":{"fields":{"slug":"/ssocatalog/Salesforce"},"tableOfContents":{"items":[{"url":"#configure-openiam-authentication-provider","title":"Configure OpenIAM Authentication provider"},{"url":"#configure-salesforce","title":"Configure Salesforce"},{"url":"#configure-sso","title":"Configure SSO"},{"url":"#validation","title":"Validation"}]}}},{"node":{"fields":{"slug":"/ssocatalog/okta"},"tableOfContents":{"items":[{"url":"#configuring-okta-sso","title":"Configuring Okta SSO"},{"url":"#configuring-saml-application","title":"Configuring SAML Application"},{"url":"#configuring-openiam","title":"Configuring OpenIAM"}]}}},{"node":{"fields":{"slug":"/troubleshooting/cluster"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/troubleshooting/connectors"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/troubleshooting/docker"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/troubleshooting/environment"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/troubleshooting/operational"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/troubleshooting/rpm"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/whatsnew/10-v4218"},"tableOfContents":{"items":[{"url":"#authentication","title":"Authentication"},{"url":"#performance","title":"Performance"},{"url":"#operational","title":"Operational"},{"url":"#ui-changes","title":"UI Changes"},{"url":"#deployment-improvement","title":"Deployment Improvement"}]}}},{"node":{"fields":{"slug":"/whatsnew/1-v420"},"tableOfContents":{"items":[{"url":"#new-features-and-improvements","title":"New features and improvements","items":[{"url":"#authentication","title":"Authentication","items":[{"url":"#adaptive-authentication","title":"Adaptive authentication"},{"url":"#social-login-and-registration","title":"Social login and registration"},{"url":"#mobile-mfa-with-push-notification","title":"Mobile MFA with push notification"},{"url":"#device-registration-and-management","title":"Device registration and management"},{"url":"#credential-providers-for-windows-and-mac","title":"Credential providers for Windows and MAC"}]},{"url":"#audit-and-compliance","title":"Audit and Compliance"},{"url":"#provisioning-and-life-cycle-management","title":"Provisioning and life cycle management","items":[{"url":"#group-provisioning","title":"Group provisioning"},{"url":"#orphan-management","title":"Orphan management"},{"url":"#define-resource-provisioning-order","title":"Define resource provisioning order"},{"url":"#connector-monitoring","title":"Connector monitoring"},{"url":"#request--approval-for-privileged-accounts","title":"Request / approval for privileged accounts"},{"url":"#position-change-workflows","title":"Position change workflows"},{"url":"#slas-for-workflows","title":"SLAs for Workflows"},{"url":"#delay-when-trying-to-open-a-request","title":"Delay when trying to open a request"}]},{"url":"#user-search","title":"User search"}]},{"url":"#architectural-changes","title":"Architectural changes","items":[{"items":[{"url":"#performance-improvements","title":"Performance improvements"},{"url":"#stack-upgrade","title":"Stack upgrade"},{"url":"#kubernetes-support","title":"Kubernetes support"},{"url":"#terraform","title":"Terraform"},{"url":"#vault","title":"Vault"},{"url":"#flyway","title":"Flyway"},{"url":"#monitoring","title":"Monitoring"}]}]}]}}},{"node":{"fields":{"slug":"/whatsnew/12-v42110"},"tableOfContents":{"items":[{"url":"#improvements","title":"Improvements"},{"url":"#new-features","title":"New features"},{"url":"#connectors","title":"Connectors"},{"url":"#additional-steps-after-upgrade","title":"Additional steps after upgrade"}]}}},{"node":{"fields":{"slug":"/whatsnew/11-v4219"},"tableOfContents":{"items":[{"url":"#scripts","title":"Scripts"}]}}},{"node":{"fields":{"slug":"/whatsnew/16-v42115"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/troubleshooting/v3_update"},"tableOfContents":{"items":[{"url":"#activiti-database-update","title":"Activiti Database update"}]}}},{"node":{"fields":{"slug":"/whatsnew/15-v42113"},"tableOfContents":{"items":[{"url":"#changes-in-groovy-scripts","title":"Changes in Groovy scripts"},{"url":"#new-groovy-scripts","title":"New Groovy scripts"}]}}},{"node":{"fields":{"slug":"/whatsnew/16-v422"},"tableOfContents":{"items":[{"url":"#platform-enhancements","title":"Platform enhancements"},{"url":"#identity-governance-enhancements","title":"Identity Governance enhancements"},{"url":"#customer-identity-ciam-improvements","title":"Customer Identity (CIAM) improvements"}]}}},{"node":{"fields":{"slug":"/whatsnew/17-v2026.1.1"},"tableOfContents":{"items":[{"url":"#new-features","title":"New features","items":[{"url":"#segregation-of-duties-sod","title":"Segregation of duties (SoD)"},{"url":"#identity--user-experience","title":"Identity & user experience"},{"url":"#connectors--integrations","title":"Connectors & integrations"},{"url":"#platform--devops","title":"Platform & DevOps"}]},{"url":"#improvements","title":"Improvements"},{"url":"#bug-fixes","title":"Bug fixes"}]}}},{"node":{"fields":{"slug":"/whatsnew/18-v2026.2.1"},"tableOfContents":{"items":[{"url":"#new-features","title":"New features","items":[{"url":"#security-and-authentication","title":"Security and authentication"},{"url":"#segregation-of-duties-sod","title":"Segregation of Duties (SoD)"},{"url":"#access-control-and-organization-management","title":"Access control and organization management"},{"url":"#risk-management","title":"Risk management"},{"url":"#password-management","title":"Password management"},{"url":"#direct-reports-and-user-admin","title":"Direct reports and user admin"}]},{"url":"#bug-fixes","title":"Bug fixes","items":[{"url":"#sod-and-mitigating-controls","title":"SoD and mitigating controls"}]},{"url":"#fixed-multiple-date-handling-bugs-on-mitigating-controls-dates-were-being-saved-as-one-day-off-adding-a-second-date-caused-the-first-to-be-lost-and-saving-any-field-update-was-clearing-both-dates-also-added-validation-requiring-that-the-expiration-date-is-not-earlier-than-effective-date","title":"Fixed multiple date-handling bugs on Mitigating Controls: dates were being saved as one day off; adding a second date caused the first to be lost; and saving any field update was clearing both dates. Also added validation requiring that the Expiration Date is not earlier than Effective Date.","items":[{"url":"#authentication-and-saml","title":"Authentication and SAML"},{"url":"#content-providers","title":"Content providers"},{"url":"#user-admin-and-profiles","title":"User admin and profiles"},{"url":"#cart-and-selfservice","title":"Cart and SelfService"},{"url":"#localization-and-database","title":"Localization and database"},{"url":"#ui-and-theming","title":"UI and theming"}]},{"url":"#infrastructure--devops","title":"Infrastructure / DevOps"}]}}},{"node":{"fields":{"slug":"/whatsnew/18-v2026.3.1"},"tableOfContents":{"items":[{"url":"#new-features","title":"New Features","items":[{"url":"#connectors-and-infrastructure","title":"Connectors and infrastructure"},{"url":"#notifications-and-email","title":"Notifications and email"}]},{"url":"#bug-fixes","title":"Bug Fixes","items":[{"url":"#sod-and-mitigating-controls","title":"SoD and mitigating controls"},{"url":"#user-access-review-uar","title":"User access review (UAR)"},{"url":"#authentication-and-saml","title":"Authentication and SAML"},{"url":"#user-admin-and-profiles","title":"User admin and profiles"}]},{"url":"#minor-upgrades","title":"Minor upgrades"}]}}},{"node":{"fields":{"slug":"/whatsnew/19-v2026.3.2"},"tableOfContents":{"items":[{"url":"#new-features","title":"New Features","items":[{"url":"#logging-and-audit","title":"Logging and audit"},{"url":"#connector-and-integration-improvements","title":"Connector and integration improvements"},{"url":"#data-processing-and-synchronization","title":"Data processing and synchronization"},{"url":"#platform-and-infrastructure","title":"Platform and infrastructure"}]},{"url":"#bug-fixes","title":"Bug Fixes","items":[{"url":"#authentication-and-sessions","title":"Authentication and sessions"},{"url":"#connectors-and-messaging","title":"Connectors and messaging"},{"url":"#user-access-and-administration","title":"User access and administration"},{"url":"#database-and-performance","title":"Database and performance"},{"url":"#ui-and-theming","title":"UI and theming"},{"url":"#access-and-application-behavior","title":"Access and application behavior"}]},{"url":"#minor-upgrades","title":"Minor upgrades"}]}}},{"node":{"fields":{"slug":"/whatsnew/20-v2026.4.1"},"tableOfContents":{"items":[{"url":"#new-features","title":"New features","items":[{"url":"#workflow-and-automation","title":"Workflow and automation"},{"url":"#access-reviews-and-compliance","title":"Access reviews and compliance"},{"url":"#platform-and-upgrade-improvements","title":"Platform and upgrade improvements"}]},{"url":"#bug-fixes","title":"Bug fixes","items":[{"url":"#ui-and-user-experience","title":"UI and user experience"},{"url":"#synchronization-and-connectors","title":"Synchronization and connectors"},{"url":"#business-rules-and-metadata","title":"Business rules and metadata"},{"url":"#data-integrity-and-lifecycle-management","title":"Data integrity and lifecycle management"},{"url":"#security-and-vulnerabilities","title":"Security and vulnerabilities"},{"url":"#access-reviews-and-sod","title":"Access reviews and SoD"}]},{"url":"#minor-upgrades","title":"Minor upgrades"}]}}},{"node":{"fields":{"slug":"/whatsnew/21-v2026.4.2"},"tableOfContents":{"items":[{"url":"#new-features","title":"New features","items":[{"url":"#connectors-and-integration","title":"Connectors and integration"}]},{"url":"#enhancements-and-tasks","title":"Enhancements and tasks","items":[{"url":"#access-reviews-and-certification","title":"Access reviews and certification"}]},{"url":"#bug-fixes","title":"Bug fixes","items":[{"url":"#ui-and-user-experience","title":"UI and user experience"},{"url":"#access-reviews-and-lifecycle-management","title":"Access reviews and lifecycle management"},{"url":"#authentication-and-security","title":"Authentication and security"},{"url":"#messaging-and-infrastructure","title":"Messaging and infrastructure"}]},{"url":"#minor-updates","title":"Minor updates"}]}}},{"node":{"fields":{"slug":"/whatsnew/7-v4215"},"tableOfContents":{"items":[{"items":[{"items":[{"url":"#self-service-portal","title":"Self-service portal"}]},{"url":"#provisioning--deprovisioning","title":"Provisioning / Deprovisioning"},{"url":"#operational","title":"Operational","items":[{"url":"#authentication","title":"Authentication"},{"url":"#deployment-improvement","title":"Deployment improvement"},{"url":"#performance","title":"Performance"}]}]},{"url":"#workflow","title":"Workflow"}]}}},{"node":{"fields":{"slug":"/whatsnew/8-v4216"},"tableOfContents":{"items":[{"items":[{"url":"#authentication","title":"Authentication"},{"url":"#privacy-and-consent","title":"Privacy and Consent"},{"url":"#self-service-portal","title":"Self-service portal"},{"url":"#deployment-improvement","title":"Deployment improvement"},{"url":"#performance","title":"Performance"}]},{"url":"#api-and-script-changes","title":"API and Script changes","items":[{"url":"#new-scripts","title":"New scripts"},{"url":"#removed-the-following-scripts","title":"Removed the following scripts"},{"url":"#changes-to-out-of-the-box-groovy-scripts","title":"Changes to out of the box Groovy scripts"}]}]}}},{"node":{"fields":{"slug":"/whatsnew/13-v42111"},"tableOfContents":{"items":[{"url":"#improvements","title":"Improvements"},{"url":"#new-features","title":"New features"},{"url":"#new-groovy-scripts","title":"New groovy scripts"}]}}},{"node":{"fields":{"slug":"/whatsnew/22-v2026.5.1"},"tableOfContents":{"items":[{"url":"#new-features","title":"New features","items":[{"url":"#authentication-and-selfservice","title":"Authentication and SelfService"},{"url":"#access-reviews-and-certification","title":"Access reviews and certification"}]},{"url":"#bug-fixes","title":"Bug fixes","items":[{"url":"#search-and-ui","title":"Search and UI"},{"url":"#connectors-and-integrations","title":"Connectors and integrations"},{"url":"#user-access-reviews-and-workflow-processing","title":"User Access Reviews and workflow processing"},{"url":"#authentication-and-security","title":"Authentication and security"}]}]}}},{"node":{"fields":{"slug":"/connectorconfig/salesforce"},"tableOfContents":{"items":[{"url":"#salesforcecom-connector","title":"Salesforce.com Connector","items":[{"url":"#prerequisites","title":"Prerequisites","items":[{"url":"#connector-host","title":"Connector host"},{"url":"#service-account-privileges","title":"Service account privileges"}]},{"url":"#installing-the-connector","title":"Installing the Connector","items":[{"url":"#docker-swarm","title":"Docker Swarm"}]},{"url":"#kubernetes","title":"Kubernetes"},{"url":"#rpm-install","title":"RPM Install"}]},{"url":"#registering-connector-in-openiam","title":"Registering Connector in OpenIAM"},{"url":"#security-information-required-to-establish-a-connection","title":"Security information required to establish a connection","items":[{"url":"#generating-a-security-token","title":"Generating a security token"},{"url":"#client-id-and-secret","title":"Client ID and Secret"}]},{"url":"#establishing-a-connection-with-sfdc-tenant","title":"Establishing a connection with SFDC tenant","items":[{"url":"#openiam-managed-system-configuration-rest","title":"OpenIAM Managed System configuration (REST):"}]},{"url":"#defining-the-provisioning-policy-map","title":"Defining the provisioning Policy Map"},{"url":"#connector-troubleshooting-tips","title":"Connector troubleshooting tips","items":[{"items":[{"url":"#important-notes","title":"Important notes"},{"url":"#errors","title":"Errors"}]}]}]}}},{"node":{"fields":{"slug":"/admin/17-services-manual-passwd-change"},"tableOfContents":{"items":[{"url":"#changing-password-for-elasticsearch","title":"Changing password for Elasticsearch"},{"url":"#password-update-for-rabbitmq","title":"Password update for RabbitMQ"},{"url":"#updating-password-for-redis","title":"Updating password for Redis"}]}}},{"node":{"fields":{"slug":"/admin/1-usradmin/10-bulkoperations"},"tableOfContents":{"items":[{"url":"#enabling-bulk-operations-in-the-webconsole-menu","title":"Enabling bulk operations in the webconsole menu"},{"url":"#using-bulk-operations-to-apply-changes-to-multiple-user-accounts","title":"Using bulk operations to apply changes to multiple user accounts"}]}}},{"node":{"fields":{"slug":"/admin/1-usradmin/1-createuser"},"tableOfContents":{"items":[{"url":"#template-view","title":"Template view"},{"url":"#classic-view","title":"Classic view","items":[{"url":"#user-credentials","title":"User credentials"},{"url":"#user-information","title":"User information"},{"url":"#access-rules","title":"Access rules"},{"url":"#email-address","title":"Email address"},{"url":"#address","title":"Address"},{"url":"#phone","title":"Phone"},{"url":"#organization-information","title":"Organization information"},{"url":"#organization-membership","title":"Organization membership"},{"url":"#supervisor-and-users-assistants","title":"Supervisor and user's assistants"},{"url":"#notifications","title":"Notifications"},{"url":"#custom-information","title":"Custom information"}]}]}}},{"node":{"fields":{"slug":"/admin/1-usradmin/11-bulkentitlements"},"tableOfContents":{"items":[{"url":"#enabling-entitlement-bulk-operation-using-webconsole","title":"Enabling entitlement bulk operation using webconsole","items":[{"url":"#using-bulk-operations-to-change-entitlements","title":"Using bulk operations to change entitlements"}]}]}}},{"node":{"fields":{"slug":"/admin/1-usradmin/12-externaldelegation"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/1-usradmin/13-unlock-account"},"tableOfContents":{"items":[{"url":"#reset-password","title":"Reset password"}]}}},{"node":{"fields":{"slug":"/admin/1-usradmin/14-add-remove-entitlements"},"tableOfContents":{"items":[{"url":"#adding-an-entitlement","title":"Adding an entitlement"},{"url":"#removing-an-entitlement","title":"Removing an entitlement"}]}}},{"node":{"fields":{"slug":"/admin/1-usradmin/16-user-conversion"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/1-usradmin/18-creating-new-dept-division"},"tableOfContents":{"items":[{"url":"#creating-a-new-organization","title":"Creating a new organization"},{"url":"#adding-a-new-vendor","title":"Adding a new vendor"},{"url":"#adding-a-new-non-managed-application","title":"Adding a new non-managed application"},{"url":"#adding-or-changing-a-new-approver-for-any-non-managed-system","title":"Adding or changing a new approver for any non-managed system"},{"url":"#troubleshooting-an-issue","title":"Troubleshooting an issue","items":[{"url":"#troubleshooting-an-issue-related-to-a-user","title":"Troubleshooting an issue related to a user"},{"url":"#troubleshooting-services","title":"Troubleshooting services"}]}]}}},{"node":{"fields":{"slug":"/admin/1-usradmin/17-newhireworkflow"},"tableOfContents":{"items":[{"url":"#configure-the-user-creation-page-template","title":"Configure the user creation page template"},{"url":"#creating-the-new-hire-workflow","title":"Creating the new hire workflow"}]}}},{"node":{"fields":{"slug":"/admin/1-usradmin/2-usertypes"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/1-usradmin/15-rehireuserflow"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/whatsnew/14-v42112"},"tableOfContents":{"items":[{"url":"#bug-fixes","title":"Bug fixes"},{"url":"#improvements","title":"Improvements"}]}}},{"node":{"fields":{"slug":"/admin/1-usradmin/6-relatedAccount"},"tableOfContents":{"items":[{"url":"#defining-relationships","title":"Defining relationships"},{"url":"#related-account-management","title":"Related account management","items":[{"items":[{"url":"#access-certification-of-related-accounts","title":"Access certification of related accounts"},{"url":"#user-lifecycle","title":"User lifecycle"}]}]}]}}},{"node":{"fields":{"slug":"/admin/1-usradmin/5-finduser"},"tableOfContents":{"items":[{"url":"#header-search","title":"Header search"},{"url":"#advanced-search","title":"Advanced search"}]}}},{"node":{"fields":{"slug":"/admin/1-usradmin/8-serviceaccounts"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/1-usradmin/9-orphanmanagement"},"tableOfContents":{"items":[{"url":"#map-orphaned-account-to-user","title":"Map orphaned account to user"}]}}},{"node":{"fields":{"slug":"/whatsnew/9-v4217"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/1-usradmin/7-customfields"},"tableOfContents":{"items":[{"url":"#adding-a-static-field","title":"Adding a static field"},{"url":"#adding-a-dynamic-field","title":"Adding a dynamic field"}]}}},{"node":{"fields":{"slug":"/admin/10-password/1-pswd-compromised"},"tableOfContents":{"items":[{"url":"#overview","title":"Overview"},{"url":"#how-it-works","title":"How it works","items":[{"url":"#security-and-privacy","title":"Security and privacy"},{"url":"#why-sha-1-is-safe-for-this-use-case","title":"Why SHA-1 is safe for this use case"}]},{"url":"#configuration","title":"Configuration"},{"url":"#implementation-details","title":"Implementation details","items":[{"url":"#what-users-see","title":"What users see"}]},{"url":"#monitoring-and-maintenance","title":"Monitoring and maintenance","items":[{"url":"#logging","title":"Logging"}]},{"url":"#troubleshooting","title":"Troubleshooting","items":[{"url":"#hibp-api-errors","title":"HIBP API errors"}]},{"url":"#frequently-asked-questions","title":"Frequently asked questions"},{"url":"#testing-instructions","title":"Testing instructions"},{"url":"#resources","title":"Resources"}]}}},{"node":{"fields":{"slug":"/admin/12-administration/3-squence-generator"},"tableOfContents":{"items":[{"url":"#sequence-generators","title":"Sequence generators","items":[{"url":"#sequence-generators-ui","title":"Sequence generators UI"},{"url":"#sequence-generators-api","title":"Sequence generators API","items":[{"url":"#synchronization-transformation","title":"Synchronization Transformation"},{"url":"#groovy-for-policy-map","title":"Groovy for Policy Map","items":[{"url":"#use-another-firstname-and-last-name-separator","title":"Use another firstname and last name separator:"},{"url":"#use-another-logic-to-generate-base-part-of-login","title":"Use another logic to generate base part of Login"},{"url":"#add-leading-zeros-to-the-counting-part-of-the-login","title":"Add leading zeros to the counting part of the login"}]}]}]}]}}},{"node":{"fields":{"slug":"/admin/12-administration/5-links"},"tableOfContents":{"items":[{"url":"#how-to-add-extra-links-to-the-login-page","title":"How to add extra links to the login page"},{"url":"#how-to-add-extra-links-to-error-page","title":"How to add extra links to error page"},{"url":"#how-to-build-custom-link-to-create-access-request","title":"How to build custom link to create access request"}]}}},{"node":{"fields":{"slug":"/admin/12-administration/6-languages"},"tableOfContents":{"items":[{"url":"#changing-localization-for-the-login-screen","title":"Changing localization for the login screen"}]}}},{"node":{"fields":{"slug":"/admin/12-administration/7-reconciliationhistory"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/12-administration/8-aboutopenIAM-page"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/12-administration/99-heartbeat"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/12-administration/9-reindex_elasticsearch"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/15-audit/2-audit-log-export-connector"},"tableOfContents":{"items":[{"url":"#accessing-audit-log-export-connectors","title":"Accessing audit log export connectors"},{"url":"#creating--editing-a-connector","title":"Creating / Editing a connector","items":[{"url":"#general-settings","title":"General settings"},{"url":"#syslog-settings","title":"Syslog settings"},{"url":"#http-settings","title":"HTTP settings"}]},{"url":"#connector-types","title":"Connector types"},{"url":"#export-modes","title":"Export modes"},{"url":"#saving-and-deleting","title":"Saving and deleting"}]}}},{"node":{"fields":{"slug":"/admin/15-audit/1-audit-events-interpret"},"tableOfContents":{"items":[{"url":"#login-and-sign-in-events","title":"Login and sign-in events"},{"url":"#password-change-events","title":"Password change events"},{"url":"#provisioning--account-creation-and-access-events","title":"Provisioning — account creation and access events"},{"url":"#synchronization--identity-import-events","title":"Synchronization — identity import events"}]}}},{"node":{"fields":{"slug":"/admin/2-authentication/1-auth-overview"},"tableOfContents":{"items":[{"url":"#content-provider","title":"Content provider"},{"url":"#authentication-policy","title":"Authentication Policy"}]}}},{"node":{"fields":{"slug":"/admin/2-authentication/10-fidologin"},"tableOfContents":{"items":[{"url":"#manage-authenticators","title":"Manage authenticators"},{"url":"#configure-openiam-to-use-fido-authentication","title":"Configure OpenIAM to use FIDO authentication"},{"url":"#login-with-fido-authenticator","title":"Login with FIDO authenticator","items":[{"url":"#some-api-for-fido-2-authentication","title":"Some API for FIDO-2 authentication"}]}]}}},{"node":{"fields":{"slug":"/admin/1-usradmin/3-adminoperations"},"tableOfContents":{"items":[{"url":"#updating-user-status","title":"Updating user status","items":[{"items":[{"url":"#leave-of-absence","title":"Leave of absence"},{"url":"#leave-with-pay","title":"Leave with pay"},{"url":"#terminate-user","title":"Terminate user"},{"url":"#deceased","title":"Deceased"},{"url":"#active","title":"Active"},{"url":"#disable","title":"Disable"},{"url":"#enable","title":"Enable"},{"url":"#delete","title":"Delete"},{"url":"#deactivate","title":"Deactivate"},{"url":"#reset-challenge-question","title":"Reset challenge question"},{"url":"#reset-account","title":"Reset account"}]},{"url":"#pop-up-windows","title":"Pop-up windows"}]}]}}},{"node":{"fields":{"slug":"/admin/2-authentication/11-credentialprovider"},"tableOfContents":{"items":[{"url":"#windows","title":"Windows"},{"url":"#macos","title":"macOS"}]}}},{"node":{"fields":{"slug":"/admin/2-authentication/14-duo-auth"},"tableOfContents":{"items":[{"url":"#configuring-the-duo-account","title":"Configuring the Duo account"},{"url":"#configuring-openiam","title":"Configuring OpenIAM","items":[{"url":"#example","title":"Example"}]}]}}},{"node":{"fields":{"slug":"/admin/2-authentication/13-criiptoauth"},"tableOfContents":{"items":[{"url":"#configuring-authentication","title":"Configuring authentication"},{"url":"#example-groovy-script","title":"Example Groovy script"}]}}},{"node":{"fields":{"slug":"/admin/1-usradmin/4-pageconfiguration"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/2-authentication/16-external-multiselect-auth"},"tableOfContents":{"items":[{"url":"#create-a-new-authentication-level-grouping-external-authentication-type","title":"Create a new authentication level grouping (external authentication type)"},{"url":"#add-the-authentication-level-grouping-to-an-authentication-rule","title":"Add the authentication level grouping to an authentication rule"}]}}},{"node":{"fields":{"slug":"/admin/2-authentication/15-modernauth"},"tableOfContents":{"items":[{"url":"#configuring-the-microsoft-part","title":"Configuring the Microsoft part"},{"url":"#configuring-smtp-in-openiam","title":"Configuring SMTP in OpenIAM"}]}}},{"node":{"fields":{"slug":"/admin/2-authentication/2-auth-policy"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/2-authentication/21-dashboards"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/2-authentication/2-delegatedauth"},"tableOfContents":{"items":[{"url":"#configuring-managed-system-authentication","title":"Configuring Managed System authentication"},{"url":"#create-an-authentication-provider","title":"Create an Authentication Provider"},{"url":"#linking-authentication-provider-to-a-content-provider","title":"Linking Authentication provider to a Content provider"}]}}},{"node":{"fields":{"slug":"/admin/2-authentication/3-passwordauth"},"tableOfContents":{"items":[{"url":"#create-an-authentication-provider","title":"Create an Authentication Provider"},{"url":"#link-authentication-provider-to-a-content-provider","title":"Link Authentication provider to a Content provider"}]}}},{"node":{"fields":{"slug":"/admin/2-authentication/7-otp"},"tableOfContents":{"items":[{"url":"#configuring-an-authentication-provider","title":"Configuring an authentication provider"},{"url":"#configuring-a-url-pattern","title":"Configuring a URL pattern","items":[{"url":"#inserting-into-pointed-places","title":"Inserting into pointed places"},{"url":"#configuring-step-up-authentication-for-federation-targets","title":"Configuring step-up authentication for federation targets"}]}]}}},{"node":{"fields":{"slug":"/admin/2-authentication/8-social"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/3-authz/1-overview"},"tableOfContents":{"items":[{"url":"#types","title":"Types"},{"url":"#permissions","title":"Permissions"},{"url":"#inheritance","title":"Inheritance"},{"url":"#relationships","title":"Relationships"}]}}},{"node":{"fields":{"slug":"/admin/2-authentication/9-adaptiveauth"},"tableOfContents":{"items":[{"url":"#authentication-rules","title":"Authentication rules","items":[{"url":"#configuring-authentication-rules","title":"Configuring authentication rules","items":[{"url":"#one-step-authentication","title":"One-step authentication"}]},{"url":"#two-or-more-steps-authentication","title":"Two or more steps authentication"},{"url":"#selecting-one-authentication-type-from-list-of-allowed","title":"Selecting one authentication type from list of allowed"},{"url":"#authentication-rule-with-adaptive-authentication","title":"Authentication rule with adaptive authentication"}]}]}}},{"node":{"fields":{"slug":"/admin/3-authz/10-accessright"},"tableOfContents":{"items":[{"url":"#creating-access-rights","title":"Creating Access rights","items":[{"url":"#linking-access-rights-to-a-managed-system","title":"Linking access rights to a Managed system"}]},{"url":"#default-access-rights","title":"Default access rights","items":[{"url":"#iscertified","title":"IsCertified"}]}]}}},{"node":{"fields":{"slug":"/admin/3-authz/11-contentprovider"},"tableOfContents":{"items":[{"url":"#creating-a-new-content-provider","title":"Creating a new Content provider"},{"url":"#configuring-a-content-provider","title":"Configuring a Content provider"},{"url":"#uri-patterns","title":"URI patterns","items":[{"url":"#request-parameters","title":"Request parameters"},{"url":"#supported-authentication-levels","title":"Supported authentication levels"},{"url":"#application-servers","title":"Application servers"},{"url":"#xss-rules","title":"XSS rules"},{"url":"#html-substitution-list","title":"HTML Substitution List"},{"url":"#metadata","title":"Metadata"},{"url":"#error-mappings","title":"Error mappings"},{"url":"#supported-http-methods","title":"Supported HTTP methods"}]}]}}},{"node":{"fields":{"slug":"/admin/3-authz/14-menus"},"tableOfContents":{"items":[{"url":"#viewing-and-navigating-the-menu-hierarchy","title":"Viewing and navigating the menu hierarchy"},{"url":"#menu-metadata","title":"Menu metadata"},{"url":"#editing-a-menu","title":"Editing a menu"},{"url":"#viewing-menu-entitlements","title":"Viewing menu entitlements","items":[{"url":"#view-menu-entitlements-for-a-user","title":"View menu entitlements for a user"},{"url":"#view-menu-entitlement-associated-with-a-role","title":"View menu entitlement associated with a role"}]},{"url":"#defining-access-roles","title":"Defining access roles"}]}}},{"node":{"fields":{"slug":"/admin/3-authz/3-conflict-groups"},"tableOfContents":{"items":[{"url":"#conflict-groups-configuration","title":"Conflict Groups Configuration"},{"url":"#violating-conflict-groups-users","title":"Violating conflict groups users"}]}}},{"node":{"fields":{"slug":"/admin/3-authz/2-roles"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/3-authz/3-groups"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/3-authz/4-types"},"tableOfContents":{"items":[{"url":"#metadata-type","title":"Metadata type","items":[{"url":"#metadata-type-manager-capabilities","title":"Metadata type manager capabilities"}]},{"url":"#metadata-element","title":"Metadata element","items":[{"url":"#creating-a-metadata-element","title":"Creating a Metadata element"},{"url":"#metadata-element-manager-capabilities","title":"Metadata element manager capabilities"}]}]}}},{"node":{"fields":{"slug":"/admin/3-authz/5-resources"},"tableOfContents":{"items":[{"url":"#types-of-resources","title":"Types of resources"},{"url":"#resource-entitlements","title":"Resource entitlements"},{"url":"#resource-ownership-and-administration","title":"Resource ownership and administration"}]}}},{"node":{"fields":{"slug":"/admin/3-authz/8-accesstossoapps"},"tableOfContents":{"items":[{"url":"#methods-of-granting-access-to-sso-applications","title":"Methods of granting access to SSO applications"},{"url":"#checking-user-access-to-sso-applications","title":"Checking user access to SSO applications","items":[{"url":"#1-check-the-authentication-provider","title":"1. Check the Authentication provider"},{"url":"#2-check-the-linked-resources","title":"2. Check the linked Resources"},{"url":"#3-verify-resource-entitlements","title":"3. Verify Resource entitlements"},{"url":"#4-check-user-entitlements","title":"4. Check user entitlements"},{"url":"#5-self-check-via-selfservice","title":"5. Self-check via SelfService"}]}]}}},{"node":{"fields":{"slug":"/admin/2-authentication/12-account-unlock"},"tableOfContents":{"items":[{"url":"#enabling-account-unlock","title":"Enabling account unlock"}]}}},{"node":{"fields":{"slug":"/admin/4-app-onboarding/1-Automated-applications"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/4-app-onboarding/2-Manual-applications"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/2-authentication/12-certificateauth"},"tableOfContents":{"items":[{"url":"#creating-client-certificate","title":"Creating client certificate"},{"url":"#configuring-apache","title":"Configuring Apache"},{"url":"#configuring-authentication-provider","title":"Configuring Authentication Provider"},{"url":"#configuring-content-provider","title":"Configuring Content Provider"},{"url":"#configuring-clients-browser","title":"Configuring Client's browser","items":[{"url":"#installing-cacrt-in-browser","title":"Installing ca.crt in browser"}]},{"url":"#changes-in-v201611","title":"Changes in v.2016.1.1"},{"url":"#finishing-steps","title":"Finishing Steps"}]}}},{"node":{"fields":{"slug":"/admin/5-lifecycle/10-managedsystemsimulation"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/5-lifecycle/12-LDAP-managedsys-config"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/5-lifecycle/11-provisioning-config"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/5-lifecycle/2-incrementalsynch"},"tableOfContents":{"items":[{"url":"#configuring-incremental-synchronization","title":"Configuring incremental synchronization"}]}}},{"node":{"fields":{"slug":"/admin/5-lifecycle/1-synch"},"tableOfContents":{"items":[{"url":"#configuring-synchronization","title":"Configuring synchronization"},{"url":"#developing-synchronization-scripts","title":"Developing synchronization scripts"},{"url":"#synchronization-troubleshooting","title":"Synchronization troubleshooting"},{"url":"#synchronizing-objects-with-non-unique-names","title":"Synchronizing objects with non-unique names"}]}}},{"node":{"fields":{"slug":"/admin/5-lifecycle/3-recon"},"tableOfContents":{"items":[{"url":"#what-is-reconciliation","title":"What is Reconciliation?","items":[{"items":[{"url":"#complete-and-incremental-reconciliation","title":"Complete and Incremental Reconciliation"}]},{"url":"#selecting-users-to-reconcile","title":"Selecting Users to Reconcile"},{"url":"#situations","title":"Situations"}]},{"url":"#configure-reconciliation","title":"Configure reconciliation"},{"url":"#record-of-reconciliation-activities","title":"Record of Reconciliation Activities"}]}}},{"node":{"fields":{"slug":"/admin/5-lifecycle/4-birthright"},"tableOfContents":{"items":[{"url":"#adding-targets","title":"Adding targets"},{"url":"#adding-business-rules","title":"Adding Business rules"},{"url":"#out-of-sync-users","title":"Out of sync users"}]}}},{"node":{"fields":{"slug":"/admin/5-lifecycle/6-managedsystem-config"},"tableOfContents":{"items":[{"url":"#creating-a-connector-from-scratch","title":"Creating a connector from scratch"}]}}},{"node":{"fields":{"slug":"/admin/5-lifecycle/5-recon-groovy"},"tableOfContents":{"items":[{"url":"#developing-a-script","title":"Developing a Script"},{"url":"#scripts-examples","title":"Scripts Examples","items":[{"items":[{"url":"#population-sciprts-for-ad-powershell","title":"Population sciprts for AD Powershell."},{"url":"#do-nothing-script","title":"Do Nothing Script"},{"url":"#search-query-script","title":"Search Query Script"},{"url":"#pre-postexecutor-script-example","title":"Pre-/PostExecutor Script Example"}]}]}]}}},{"node":{"fields":{"slug":"/admin/5-lifecycle/9-importorganization"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/3-authz/9-approvalflow"},"tableOfContents":{"items":[{"url":"#defining-an-approval-workflow","title":"Defining an Approval workflow","items":[{"url":"#approval-flow-field-descriptions","title":"Approval flow field descriptions","items":[{"url":"#adding-additional-approval-steps","title":"Adding additional approval steps"}]}]},{"url":"#approver-types","title":"Approver Types"},{"url":"#escalations","title":"Escalations","items":[{"url":"#enabling-escalation-processing","title":"Enabling escalation processing"}]},{"url":"#notifications","title":"Notifications","items":[{"url":"#enabling-approval-notifications","title":"Enabling approval notifications"}]},{"url":"#email-notifications","title":"Email notifications","items":[{"url":"#example-email-notifications","title":"Example email notifications","items":[{"url":"#request-created-on-behalf-of-a-user","title":"Request created on behalf of a user"},{"url":"#pending-request-for-approval","title":"Pending request for approval"},{"url":"#request-approved","title":"Request approved"},{"url":"#preliminary-approval-notification","title":"Preliminary approval notification"}]}]}]}}},{"node":{"fields":{"slug":"/admin/3-authz/6-organization"},"tableOfContents":{"items":[{"url":"#creating-organization-types","title":"Creating organization types"},{"url":"#creating-a-new-organization","title":"Creating a new organization","items":[{"url":"#organization-fields-and-descriptions","title":"Organization fields and descriptions"},{"url":"#updating-an-existing-organization","title":"Updating an existing organization"}]},{"url":"#organization-hierarchy","title":"Organization hierarchy"},{"url":"#managing-user-membership-in-organizations","title":"Managing user membership in organizations","items":[{"url":"#user-organization-assignment-fields","title":"User Organization Assignment Fields"},{"url":"#alternative-method-hr-system-synchronization","title":"Alternative Method: HR System Synchronization"}]}]}}},{"node":{"fields":{"slug":"/admin/5-lifecycle/8-importentitlements"},"tableOfContents":{"items":[{"url":"#importing-entitlements-with-a-connector","title":"Importing entitlements with a connector"},{"url":"#importing-entitlements-with-a-csv-file","title":"Importing entitlements with a CSV file","items":[{"url":"#automating-the-csv-synchronization-process","title":"Automating the CSV synchronization process","items":[{"url":"#rpm-installations","title":"RPM installations"},{"url":"#docker-installations","title":"Docker installations"}]}]}]}}},{"node":{"fields":{"slug":"/admin/6-requestapprov/2-approval-flow"},"tableOfContents":{"items":[{"url":"#defining-approval-flow","title":"Defining approval flow"},{"url":"#application-level-approval","title":"Application-level approval","items":[{"url":"#approver-types","title":"Approver Types"}]},{"url":"#entitlement-level-approval","title":"Entitlement-level approval"},{"url":"#global-default-approver","title":"Global default approver"}]}}},{"node":{"fields":{"slug":"/admin/6-requestapprov/4-post-request"},"tableOfContents":{"items":[{"url":"#notifying-users-about-the-results-of-provisioning-requested-access","title":"Notifying users about the results of provisioning requested access"},{"url":"#performing-post-actions-when-request-has-been-approved","title":"Performing post actions when request has been approved"}]}}},{"node":{"fields":{"slug":"/admin/6-requestapprov/5-approve-by-email"},"tableOfContents":{"items":[{"items":[{"url":"#request-id-in-subject","title":"Request ID in subject"}]},{"url":"#approver-email-address","title":"Approver email address"},{"url":"#enabling-inbox-reading","title":"Enabling inbox reading"},{"url":"#audit-log","title":"Audit log"}]}}},{"node":{"fields":{"slug":"/admin/6-requestapprov/3-manualTasks"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/7-access-cert/1-entitlmentcert"},"tableOfContents":{"items":[{"url":"#defining-applications-participating-in-the-review","title":"Defining applications participating in the review"}]}}},{"node":{"fields":{"slug":"/admin/6-requestapprov/7-questionnaire"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/7-access-cert/10-mitigation-controls"},"tableOfContents":{"items":[{"url":"#what-are-mitigating-controls","title":"What are mitigating controls?"},{"url":"#sod-policy-integration","title":"SoD policy integration"}]}}},{"node":{"fields":{"slug":"/admin/7-access-cert/2-risk-event-driven-cert"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/7-access-cert/2-risk-factor-config"},"tableOfContents":{"items":[{"url":"#impact-levels","title":"Impact levels"},{"url":"#risk-factors","title":"Risk factors","items":[{"url":"#configuring-a-risk-factor","title":"Configuring a risk factor"}]}]}}},{"node":{"fields":{"slug":"/admin/7-access-cert/2-usercert"},"tableOfContents":{"items":[{"url":"#creating-a-new-certification","title":"Creating a new certification"},{"url":"#types-of-reviewers","title":"Types of reviewers"},{"url":"#user-selection","title":"User selection"}]}}},{"node":{"fields":{"slug":"/admin/7-access-cert/3-certification-reporting"},"tableOfContents":{"items":[{"url":"#scope-report","title":"Scope report"},{"url":"#current-state-report","title":"Current state report"},{"url":"#results-report","title":"Results report"}]}}},{"node":{"fields":{"slug":"/admin/7-access-cert/5-delete-campaign"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/7-access-cert/4-membership-tags"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/7-access-cert/6-campaign-database"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/6-requestapprov/1-application-category"},"tableOfContents":{"items":[{"items":[{"url":"#defining-a-categorization-structure","title":"Defining a categorization structure"}]},{"url":"#creating-a-new-category","title":"Creating a new category","items":[{"url":"#creating-a-child-category","title":"Creating a child category"}]},{"url":"#manage-end-user-access-to-categories-in-the-catalog","title":"Manage end-user access to categories in the catalog","items":[{"url":"#associating-the-application-with-a-category","title":"Associating the application with a category"}]}]}}},{"node":{"fields":{"slug":"/admin/7-access-cert/8-multiple-reviwer-campaigns"},"tableOfContents":{"items":[{"url":"#multi-reviewer-campaign-expiration-and-escalation-when-the-first-reviewer-does-not-complete-the-review","title":"Multi-reviewer campaign expiration and escalation when the first reviewer does not complete the review"},{"url":"#multi-reviewer-campaign-when-one-reviewer-completes-the-review","title":"Multi-reviewer campaign when one reviewer completes the review"},{"url":"#access-revocation-in-multi-reviewer-campaigns","title":"Access revocation in multi-reviewer campaigns"},{"url":"#cascade-extension","title":"Cascade extension","items":[{"url":"#cascade-extension-off","title":"Cascade extension OFF"},{"url":"#cascade-extension-on","title":"Cascade extension ON"},{"url":"#common-rules-and-notes","title":"Common rules and notes"}]}]}}},{"node":{"fields":{"slug":"/admin/7-access-cert/9-segregation-of-duties"},"tableOfContents":{"items":[{"url":"#core-concepts","title":"Core concepts","items":[{"url":"#policy","title":"Policy"},{"url":"#policy-segments","title":"Policy segments"},{"url":"#mitigating-controls","title":"Mitigating controls"}]},{"url":"#configuration","title":"Configuration","items":[{"url":"#creating-a-policy","title":"Creating a policy"},{"url":"#searching-policies","title":"Searching policies"},{"url":"#deleting-a-policy","title":"Deleting a policy"}]},{"url":"#violation-detection","title":"Violation detection","items":[{"url":"#how-violations-are-detected","title":"How violations are detected"},{"url":"#triggering-detection","title":"Triggering detection"},{"url":"#querying-violations","title":"Querying violations"}]},{"url":"#severity-levels","title":"Severity levels","items":[{"url":"#hard-violation","title":"Hard violation"},{"url":"#soft-violation","title":"Soft violation"},{"url":"#violation-resolution-notification","title":"Violation resolution notification"}]},{"url":"#remediation","title":"Remediation"},{"url":"#integration-with-access-certification","title":"Integration with Access Certification"},{"url":"#reporting","title":"Reporting"},{"url":"#data-model","title":"Data model"},{"url":"#caching-architecture","title":"Caching architecture"},{"url":"#enumerations-reference","title":"Enumerations Reference"}]}}},{"node":{"fields":{"slug":"/admin/8-sso/1-saml"},"tableOfContents":{"items":[{"url":"#generate-a-public-and-private-key-pair","title":"Generate a public and private key pair","items":[{"url":"#install-openssl","title":"Install OpenSSL"},{"url":"#generate-a-public-and-private-key-pair-1","title":"Generate a public and private key pair"}]},{"url":"#configure-application-and-openiam-side-for-the-saml-integration","title":"Configure Application and OpenIAM side for the SAML integration"},{"url":"#grant-access-to-your-application","title":"Grant access to your application"},{"url":"#validate-the-integration","title":"Validate the integration"}]}}},{"node":{"fields":{"slug":"/admin/7-access-cert/7-expiration-policy"},"tableOfContents":{"items":[{"url":"#do-nothing","title":"Do Nothing"},{"url":"#revoke-all-access","title":"Revoke all access"},{"url":"#revoke-only-already-revoked-access","title":"Revoke only already revoked access"}]}}},{"node":{"fields":{"slug":"/admin/9-r-Proxy/1-formfill"},"tableOfContents":{"items":[{"url":"#configure-content-provider-uri-pattern-using-form-fill","title":"Configure Content Provider URI Pattern using Form Fill"}]}}},{"node":{"fields":{"slug":"/admin/9-r-Proxy/2-headerinj"},"tableOfContents":{"items":[{"url":"#configuring-content-provider-uri-pattern-to-add-headers","title":"Configuring Content Provider URI Pattern to add headers"}]}}},{"node":{"fields":{"slug":"/admin/8-sso/5-auth_scopes"},"tableOfContents":{"items":[{"url":"#default-scopes","title":"Default Scopes","items":[{"url":"#example","title":"Example"}]},{"url":"#custom-scopes","title":"Custom Scopes"},{"url":"#groovy-scripts-for-scopes","title":"Groovy scripts for scopes"},{"url":"#adding-new-scopes-to-your-authentication-provider","title":"Adding new scopes to your authentication provider"}]}}},{"node":{"fields":{"slug":"/admin/9-r-Proxy/3-urlrewriting"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/9-r-Proxy/6-example"},"tableOfContents":{"items":[{"url":"#1-no-authentication-in-legacy-web-application","title":"1. No authentication in legacy web application.","items":[{"url":"#11-simple-example","title":"1.1 Simple Example"},{"url":"#2-example-with-substitution","title":"2. Example with substitution"}]}]}}},{"node":{"fields":{"slug":"/admin/9-r-Proxy/8-kerberos"},"tableOfContents":{"items":[{"url":"#host-details-of-demo-setup","title":"Host details of demo setup"},{"url":"#configuring-active-directory-and-creating-a-keytab-file","title":"Configuring Active directory and creating a Keytab file"},{"url":"#configuring-rproxy-host","title":"Configuring rProxy host"},{"url":"#configuring-openiam","title":"Configuring OpenIAM"},{"url":"#configuring-client-machine","title":"Configuring Client Machine"}]}}},{"node":{"fields":{"slug":"/admin/9-r-Proxy/7-rProxy-loadbalancer"},"tableOfContents":{"items":[{"url":"#global-settings","title":"Global settings"}]}}},{"node":{"fields":{"slug":"/admin/9-r-Proxy/9-directive-reference"},"tableOfContents":{"items":[{"url":"#core--esb-connectivity","title":"Core / ESB Connectivity"},{"url":"#authentication--session","title":"Authentication & Session"},{"url":"#url-routing--redirects","title":"URL Routing & Redirects"},{"url":"#security-headers","title":"Security Headers","items":[{"url":"#csp-example","title":"CSP Example"}]},{"url":"#client-certificate-authentication","title":"Client Certificate Authentication"},{"url":"#kerberos-authentication","title":"Kerberos Authentication"},{"url":"#forwarded-headers--client-ip","title":"Forwarded Headers / Client IP"},{"url":"#soap--header-based-authentication","title":"SOAP / Header-Based Authentication"},{"url":"#curl-backend-transport","title":"cURL Backend Transport"},{"url":"#worker-pool","title":"Worker Pool","items":[{"url":"#recommended-worker-pool-settings-docker-deployment","title":"Recommended worker pool settings (Docker deployment)"}]},{"url":"#debug--logging","title":"Debug & Logging","items":[{"url":"#full-debug-configuration-example","title":"Full debug configuration example"}]}]}}},{"node":{"fields":{"slug":"/admin/8-sso/2-oauth2"},"tableOfContents":{"items":[{"url":"#overview","title":"Overview"},{"url":"#creating-an-authentication-provider","title":"Creating an Authentication Provider","items":[{"url":"#configuring-the-oauth-client-provider-in-openiam","title":"Configuring the oAuth Client Provider in OpenIAM"},{"url":"#how-to-grant-access-to-an-application","title":"How to grant access to an application"}]}]}}},{"node":{"fields":{"slug":"/connectorconfig/microsoft/10-winlocal"},"tableOfContents":{"items":[{"url":"#installation-and-connection-to-openiam","title":"Installation and Connection to OpenIAM"},{"url":"#ssl-configuration","title":"SSL Configuration"}]}}},{"node":{"fields":{"slug":"/admin/8-sso/3-oidc"},"tableOfContents":{"items":[{"items":[{"url":"#create-an-authentication-provider","title":"Create an Authentication Provider"},{"url":"#configure-oidc-client-provider-in-openiam","title":"Configure OIDC Client Provider in OpenIAM"}]},{"url":"#grant-access-to-your-application","title":"Grant access to your application"}]}}},{"node":{"fields":{"slug":"/connectorconfig/microsoft/1-powershellconnectorinstallation"},"tableOfContents":{"items":[{"items":[{"url":"#basic-requirements","title":"Basic requirements","items":[{"url":"#hardware-requirements","title":"Hardware requirements"},{"url":"#software-requirements","title":"Software requirements","items":[{"url":"#net-framework","title":".NET Framework"},{"url":"#powershell","title":"PowerShell"}]}]},{"url":"#additional-dependencies","title":"Additional dependencies"}]},{"url":"#multiple-connectors-installation","title":"Multiple connectors installation"},{"url":"#load-balancing","title":"Load balancing"},{"url":"#getting-connection-parameters-with-openiam","title":"Getting connection parameters with OpenIAM"},{"url":"#installation-process","title":"Installation process"},{"url":"#removing-connector","title":"Removing connector"},{"url":"#updating-connector","title":"Updating connector"},{"url":"#rabbitmq-queuetype","title":"RabbitMQ QueueType"}]}}},{"node":{"fields":{"slug":"/connectorconfig/microsoft/12-dynamics365FO"},"tableOfContents":{"items":[{"url":"#general-information","title":"General information"},{"url":"#installation-and-connection-to-openiam","title":"Installation and connection to OpenIAM"},{"url":"#general-usage","title":"General usage"},{"url":"#configuring-managed-system","title":"Configuring managed system","items":[{"items":[{"url":"#configuring-policy-map","title":"Configuring policy map"},{"url":"#add-vs-update-operations-difference","title":"Add vs Update operations difference"},{"url":"#suspend-and-resume-operations","title":"Suspend and resume operations"},{"url":"#deleting-users","title":"Deleting users"},{"url":"#synchronization","title":"Synchronization"}]}]}]}}},{"node":{"fields":{"slug":"/connectorconfig/microsoft/12-WindowsPasswordFilter"},"tableOfContents":{"items":[{"url":"#general-information","title":"General information","items":[{"url":"#availability","title":"Availability"},{"url":"#communication-with-openiam","title":"Communication with OpenIAM"}]},{"url":"#installing-password-filter","title":"Installing Password Filter"},{"url":"#uninstalling-password-filter","title":"Uninstalling Password Filter"},{"url":"#upgrading-password-filter","title":"Upgrading Password Filter"},{"url":"#configuring-password-filter","title":"Configuring Password Filter"},{"url":"#windows-event-viewer-and-eventid-descriptions","title":"Windows Event Viewer and EventID descriptions"},{"url":"#restriction-file","title":"Restriction file"},{"url":"#supporting-multiple-openiam-instances-notifications","title":"Supporting multiple OpenIAM instances notifications"},{"url":"#troubleshooting-the-password-filter","title":"Troubleshooting the Password filter"}]}}},{"node":{"fields":{"slug":"/connectorconfig/microsoft/13-successfactors"},"tableOfContents":{"items":[{"url":"#connection-information","title":"Connection information"},{"url":"#data-mapping","title":"Data mapping"},{"url":"#successfactors-connector-c-module-information","title":"SuccessFactors Connector C# Module Information","items":[{"url":"#powershell-information","title":"PowerShell Information"},{"url":"#security-considerations","title":"Security Considerations"},{"url":"#filter-query","title":"Filter Query"}]},{"url":"#additional-notes","title":"Additional notes"}]}}},{"node":{"fields":{"slug":"/connectorconfig/microsoft/14-psgraph"},"tableOfContents":{"items":[{"url":"#prerequisites","title":"Prerequisites"},{"url":"#preparing-environment","title":"Preparing environment","items":[{"url":"#installing-net-48","title":"Installing .NET 4.8"},{"url":"#installing-microsoft-graph-powershell-module","title":"Installing Microsoft Graph PowerShell module"},{"url":"#registering-connector-application","title":"Registering connector application"},{"url":"#generating-application-certificate","title":"Generating application certificate"},{"url":"#running-registration-script","title":"Running registration script"}]},{"url":"#granting-admin-consent-and-adjusting-application-permissions","title":"Granting admin consent and adjusting application permissions","items":[{"url":"#granting-admin-consent","title":"Granting admin consent"},{"url":"#setting-api-permissions","title":"Setting API permissions"},{"url":"#setting-other-permissions","title":"Setting other permissions"},{"url":"#getting-parameters-for-openiam-managed-system-configuration","title":"Getting parameters for OpenIAM Managed System configuration"}]},{"url":"#attributes","title":"Attributes","items":[{"url":"#assigning-license-packages","title":"Assigning license packages"},{"url":"#assigning-and-revoking-roles-for-applications","title":"Assigning and revoking roles for applications"}]},{"url":"#synchronization","title":"Synchronization","items":[{"url":"#synchronizing-groups","title":"Synchronizing groups"},{"url":"#synchronization-applications","title":"Synchronization applications"},{"url":"#managing-guest-users","title":"Managing guest users"}]}]}}},{"node":{"fields":{"slug":"/connectorconfig/microsoft/15-powershell-generic"},"tableOfContents":{"items":[{"url":"#installing-the-generic-connector","title":"Installing the generic connector"}]}}},{"node":{"fields":{"slug":"/admin/12-administration/2-mail-management"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/12-administration/1-sysconfig"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/12-administration/4-otpconfig"},"tableOfContents":{"items":[{"url":"#otp-provider-configuration","title":"OTP Provider Configuration","items":[{"url":"#common-otp-provider-configuration-options","title":"Common OTP Provider Configuration Options","items":[{"url":"#name","title":"Name"},{"url":"#type","title":"Type"},{"url":"#failover-otp-provider","title":"Failover OTP Provider"},{"url":"#attributes","title":"Attributes","items":[{"url":"#twilio-sms-provider","title":"Twilio SMS Provider"},{"url":"#smsglobal-sms-provider","title":"SMSGlobal SMS Provider"},{"url":"#email-otp-provider","title":"Email OTP Provider"},{"url":"#twilio-voice-call-provider","title":"Twilio Voice Call Provider"}]}]},{"url":"#otp-provider-types-compatibility-matrix","title":"OTP Provider Types compatibility matrix"},{"url":"#authentication-provider-configuration","title":"Authentication Provider Configuration"}]}]}}},{"node":{"fields":{"slug":"/connectorconfig/microsoft/16-teams"},"tableOfContents":{"items":[{"url":"#prerequisites","title":"Prerequisites"},{"url":"#preparing-the-environment","title":"Preparing the environment"},{"url":"#installing-the-microsoftteams-powershell-module","title":"Installing the MicrosoftTeams PowerShell module"},{"url":"#registering-the-connector-application","title":"Registering the connector application","items":[{"url":"#generating-the-application-certificate","title":"Generating the application certificate"},{"url":"#creating-an-application-in-entra-id-azure","title":"Creating an application in Entra ID (Azure)"}]},{"url":"#configuring-the-openiam-managed-system","title":"Configuring the OpenIAM managed system"},{"url":"#provisioning","title":"Provisioning","items":[{"url":"#users-provisioning","title":"Users provisioning"},{"url":"#applicationinstance-provisioning","title":"ApplicationInstance provisioning"}]}]}}},{"node":{"fields":{"slug":"/connectorconfig/microsoft/3-powershellconnectorupdate"},"tableOfContents":{"items":[{"url":"#updating-powershell-connector","title":"Updating PowerShell connector","items":[{"items":[{"url":"#updating-connector-without-customizations","title":"Updating connector without customizations"},{"url":"#updating-connector-with-customizations","title":"Updating connector with customizations"}]}]}]}}},{"node":{"fields":{"slug":"/connectorconfig/microsoft/5-azuread"},"tableOfContents":{"items":[{"url":"#general-information","title":"General information","items":[{"url":"#service-account-information","title":"Service account information"}]},{"url":"#requirements","title":"Requirements","items":[{"url":"#installation-and-connection-to-openiam","title":"Installation and connection to OpenIAM"},{"url":"#synchronization","title":"Synchronization"},{"url":"#users-synchronization","title":"Users synchronization"},{"url":"#groups-synchronization","title":"Groups synchronization"},{"url":"#service-principals-synchronization","title":"Service principals synchronization"},{"url":"#entra-resources-report-usage","title":"Entra resources report usage"},{"url":"#entra-id-roles-synchronization","title":"Entra ID Roles synchronization"}]},{"url":"#connector-troubleshooting-and-tips","title":"Connector troubleshooting and tips","items":[{"items":[{"url":"#o365-group-membership","title":"O365 group membership"}]}]}]}}},{"node":{"fields":{"slug":"/connectorconfig/microsoft/7-azuredevops"},"tableOfContents":{"items":[{"url":"#general-information","title":"General information"},{"url":"#installation-and-connection-to-openiam","title":"Installation and connection to OpenIAM"},{"url":"#general-usage","title":"General usage"},{"url":"#configuring-the-managed-system","title":"Configuring the managed system","items":[{"items":[{"url":"#synchronization","title":"Synchronization","items":[{"url":"#synchronizing-users","title":"Synchronizing users"},{"url":"#synchronizing-groups","title":"Synchronizing groups"},{"url":"#synchronizing-users-access-levels","title":"Synchronizing users' access levels"}]}]}]}]}}},{"node":{"fields":{"slug":"/connectorconfig/microsoft/8-dynamics365"},"tableOfContents":{"items":[{"url":"#general-information","title":"General information"},{"url":"#installation-and-connection-to-openiam","title":"Installation and connection to OpenIAM"},{"url":"#general-usage","title":"General usage"},{"url":"#configuring-managed-system","title":"Configuring managed system","items":[{"items":[{"url":"#configuring-policy-map","title":"Configuring policy map"},{"url":"#add-vs-update-operations-difference","title":"Add vs Update operations difference"},{"url":"#suspend-and-resume-operations","title":"Suspend and resume operations"},{"url":"#deleting-users","title":"Deleting users"},{"url":"#synchronization","title":"Synchronization"},{"url":"#possible-errors","title":"Possible errors"}]}]}]}}},{"node":{"fields":{"slug":"/connectorconfig/microsoft/9-sqlserver"},"tableOfContents":{"items":[{"url":"#installing-the-connector","title":"Installing the connector"},{"url":"#general-usage","title":"General usage"},{"url":"#provisioning","title":"Provisioning","items":[{"items":[{"url":"#add","title":"ADD"},{"url":"#modify","title":"MODIFY"},{"url":"#reset-password","title":"RESET PASSWORD"},{"url":"#suspend","title":"SUSPEND"},{"url":"#resume","title":"RESUME"},{"url":"#delete","title":"DELETE"}]}]},{"url":"#search","title":"Search","items":[{"items":[{"url":"#user-object","title":"User object"},{"url":"#database-object","title":"Database object"}]}]}]}}},{"node":{"fields":{"slug":"/connectorconfig/scriptConnector/connector-request-template"},"tableOfContents":{"items":[{"url":"#rest-api-integration","title":"REST API Integration"},{"url":"#relational-database-integration","title":"Relational database integration"}]}}},{"node":{"fields":{"slug":"/developerguide/1-custom-css/1-customcss"},"tableOfContents":{"items":[{"url":"#docker-environment","title":"Docker environment"},{"url":"#rpm-environment","title":"RPM environment"}]}}},{"node":{"fields":{"slug":"/connectorconfig/scriptConnector/GroovyScriptConnector"},"tableOfContents":{"items":[{"url":"#real-life-example","title":"Real-life example"},{"url":"#essential-preparations-for-implementation-using-rest-apis","title":"Essential preparations for implementation (using REST APIs)"},{"url":"#configuring-openiam","title":"Configuring OpenIAM","items":[{"url":"#important-considerations","title":"Important considerations"}]},{"url":"#configuring-managed-system","title":"Configuring Managed System"},{"url":"#integrating-with-the-script-connector-using-rest-apis","title":"Integrating with the Script Connector (using REST APIs)","items":[{"url":"#user-lifecycle-operations-in-openiam","title":"User lifecycle operations in OpenIAM"},{"url":"#security-best-practices-for-api-integration","title":"Security best practices for API integration"},{"url":"#api-operations","title":"API operations"},{"url":"#groups-management-using-openiam-groovy-script-connector","title":"Groups management using OpenIAM Groovy Script connector"}]},{"url":"#script-development-for-groovy-script-connector","title":"Script development for Groovy Script Connector","items":[{"url":"#overview","title":"Overview","items":[{"url":"#accessing-openiam-connector-repository","title":"Accessing OpenIAM connector repository"}]},{"url":"#handlersobject-rules-in-openiam-groovy-script-connectors","title":"Handlers/Object rules in OpenIAM Groovy Script Connectors"},{"url":"#required-libraries","title":"Required libraries","items":[{"url":"#implementing-the-test-connection-handler","title":"Implementing the Test connection handler"},{"url":"#implementing-the-search-operation-handler","title":"Implementing the Search operation handler"},{"url":"#implementing-crud-operation-handlers-addmodify-handlers","title":"Implementing CRUD operation handlers (ADD/MODIFY handlers)"}]},{"url":"#deployment-of-groovy-script-connector","title":"Deployment of Groovy Script connector","items":[{"url":"#key-considerations-for-deploying-a-remote-connector","title":"Key considerations for deploying a remote connector"}]},{"url":"#registering-a-connector-with-openiam","title":"Registering a connector with OpenIAM","items":[{"url":"#detailed-deployment-strategies","title":"Detailed deployment strategies"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/1-custom-css/2-cssexamples"},"tableOfContents":{"items":[{"url":"#css-file-structure-for-a-login-page","title":"CSS file structure for a login page"},{"url":"#css-file-structure-for-a-change-password-screen","title":"CSS file structure for a change password screen"},{"url":"#css-file-structure-for-selfservice-creating-a-request-page","title":"CSS file structure for SelfService creating a request page"}]}}},{"node":{"fields":{"slug":"/connectorconfig/microsoft/6-exchange"},"tableOfContents":{"items":[{"url":"#requirements","title":"Requirements"},{"url":"#installation-and-connection-to-openiam","title":"Installation and connection to OpenIAM"},{"url":"#general-usage","title":"General usage","items":[{"items":[{"url":"#service-account","title":"Service account"}]}]},{"url":"#connecting-to-your-directory","title":"Connecting to your directory"},{"url":"#attribute-provisioning-rules","title":"Attribute provisioning rules","items":[{"items":[{"url":"#connector-mode-settings","title":"Connector mode settings"},{"url":"#important-notes","title":"Important notes"},{"url":"#user-provisioning","title":"User provisioning"},{"url":"#assigning-a-license","title":"Assigning a license"}]}]},{"url":"#synchronization","title":"Synchronization"},{"url":"#application-authentication-in-the-exchange-connector","title":"Application authentication in the Exchange connector"},{"url":"#connector-troubleshooting-and-tips","title":"Connector troubleshooting and tips"}]}}},{"node":{"fields":{"slug":"/developerguide/2-api/1-postman"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/connectorconfig/microsoft/2-powershellconnectorsusage"},"tableOfContents":{"items":[{"url":"#working-with-the-connector-configuration","title":"Working with the connector configuration","items":[{"items":[{"items":[{"url":"#connector-configuration-format","title":"Connector configuration format"},{"url":"#working-with-encrypted-parameters","title":"Working with encrypted parameters"}]}]}]},{"url":"#working-with-logs","title":"Working with logs","items":[{"items":[{"items":[{"url":"#log-format","title":"Log format"},{"url":"#viewing-log-database","title":"Viewing log database"},{"url":"#windows-event-viewer","title":"Windows Event Viewer"}]}]}]},{"url":"#simulation-mode","title":"Simulation mode"},{"url":"#checking-the-connector-version","title":"Checking the connector version","items":[{"url":"#tls-connection-to-the-rabbitmq","title":"TLS connection to the RabbitMQ"}]}]}}},{"node":{"fields":{"slug":"/developerguide/2-api/2-python"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/developerguide/2-api/3-java"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/developerguide/4-sheduledtasks/2-access-certification-reminder"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/developerguide/5-datamodel/1-usermodel"},"tableOfContents":{"items":[{"url":"#table-users","title":"Table: USERS"},{"url":"#table-login","title":"Table: LOGIN"},{"url":"#table-user_attributes","title":"Table: USER_ATTRIBUTES"},{"url":"#table-login_attribute","title":"Table: LOGIN_ATTRIBUTE"},{"url":"#table-login_attribute_values","title":"Table: LOGIN_ATTRIBUTE_VALUES"},{"url":"#table-user_attribute_values","title":"Table: USER_ATTRIBUTE_VALUES"},{"url":"#table-user_affiliation","title":"Table: USER_AFFILIATION"},{"url":"#table-user_affiliation_rights","title":"Table: USER_AFFILIATION_RIGHTS"},{"url":"#table-user_auth_param","title":"Table: USER_AUTH_PARAM"},{"url":"#table-user_role","title":"Table: USER_ROLE"},{"url":"#table-user_grp","title":"Table: USER_GRP"},{"url":"#table-user_grp_membership_rights","title":"Table: USER_GRP_MEMBERSHIP_RIGHTS"},{"url":"#table-user_identity_ans","title":"Table: USER_IDENTITY_ANS"},{"url":"#table-user_it_policy_history","title":"Table: USER_IT_POLICY_HISTORY"},{"url":"#table-user_key","title":"Table: USER_KEY"},{"url":"#table-user_note","title":"Table: USER_NOTE"},{"url":"#table-user_res_membership_rights","title":"Table: USER_RES_MEMBERSHIP_RIGHTS"},{"url":"#table-user_role_membership_rights","title":"Table: USER_ROLE_MEMBERSHIP_RIGHTS"},{"url":"#table-user_to_user_membership","title":"Table: USER_TO_USER_MEMBERSHIP"},{"url":"#table-address","title":"Table: ADDRESS"},{"url":"#table-auth_state","title":"Table: AUTH_STATE"},{"url":"#table-auth_state_auth_param_xref","title":"Table: AUTH_STATE_AUTH_PARAM_XREF"},{"url":"#table-address-1","title":"Table: ADDRESS"},{"url":"#table-email_address","title":"Table: EMAIL_ADDRESS"},{"url":"#table-phone","title":"Table: PHONE"},{"url":"#table-company","title":"Table: COMPANY"},{"url":"#table-company_attribute","title":"Table: COMPANY_ATTRIBUTE"},{"url":"#table-company_attribute_values","title":"Table: COMPANY_ATTRIBUTE_VALUES"},{"url":"#table-company_to_company_membership","title":"Table: COMPANY_TO_COMPANY_MEMBERSHIP"}]}}},{"node":{"fields":{"slug":"/developerguide/5-datamodel/2-rbacmodel"},"tableOfContents":{"items":[{"url":"#table-grp","title":"Table: GRP"},{"url":"#table-grp_attributes","title":"Table: GRP_ATTRIBUTES"},{"url":"#table-grp_grp_membership_rights","title":"Table: GRP_GRP_MEMBERSHIP_RIGHTS"},{"url":"#table-grp_role","title":"Table: GRP_ROLE"},{"url":"#table-grp_role_membership_rights","title":"Table: GRP_ROLE_MEMBERSHIP_RIGHTS"},{"url":"#table-metadata_type","title":"Table: METADATA_TYPE"},{"url":"#table-metadata_element","title":"Table: METADATA_ELEMENT"},{"url":"#table-role","title":"Table: ROLE"},{"url":"#table-role_attribute","title":"Table: ROLE_ATTRIBUTE"},{"url":"#table-role_attribute_values","title":"Table: ROLE_ATTRIBUTE_VALUES"},{"url":"#table-role_org_membership","title":"Table: ROLE_ORG_MEMBERSHIP"},{"url":"#table-role_org_membership_rights","title":"Table: ROLE_ORG_MEMBERSHIP_RIGHTS"},{"url":"#table-role_role_membership_rights","title":"Table: ROLE_ROLE_MEMBERSHIP_RIGHTS"},{"url":"#table-res-resource","title":"Table: RES (Resource)"},{"url":"#table-resource_group","title":"Table: RESOURCE_GROUP"},{"url":"#table-resource_prop-resource-properties","title":"Table: RESOURCE_PROP (Resource Properties)"},{"url":"#table-resource_role","title":"Table: RESOURCE_ROLE"},{"url":"#table-resource_type","title":"Table: RESOURCE_TYPE"},{"url":"#table-res_attribute_values","title":"Table: RES_ATTRIBUTE_VALUES"},{"url":"#table-res_grp_membership_rights","title":"Table: RES_GRP_MEMBERSHIP_RIGHTS"},{"url":"#table-res_org_membership","title":"Table: RES_ORG_MEMBERSHIP"},{"url":"#table-res_org_membership_rights","title":"Table: RES_ORG_MEMBERSHIP_RIGHTS"},{"url":"#table-res_res_membership_rights","title":"Table: RES_RES_MEMBERSHIP_RIGHTS"},{"url":"#table-res_role_membership_rights","title":"Table: RES_ROLE_MEMBERSHIP_RIGHTS"}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/approver-association"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#post-restapiapproverassociationssave","title":"POST /rest/api/approverAssociations/save"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/access-right"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#get-restapiaccessrightsnew","title":"GET /rest/api/accessrights/new"},{"url":"#post-restapiaccessrightssave","title":"POST /rest/api/accessrights/save"},{"url":"#get-restapiaccessrightssearch","title":"GET /rest/api/accessrights/search"},{"url":"#delete-restapiaccessrightsid","title":"DELETE /rest/api/accessrights/(id)"},{"url":"#get-restapiaccessrightsid","title":"GET /rest/api/accessrights/(id)"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/audit-log"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#get-restapiauditlogexportlogs","title":"GET /rest/api/auditlog/exportLogs"},{"url":"#get-restapiauditlogfindlogs","title":"GET /rest/api/auditlog/findLogs"},{"url":"#get-restapiauditloggetid","title":"GET /rest/api/auditlog/get/(id)"},{"url":"#get-restapiauditloggetidchildren","title":"GET /rest/api/auditlog/get/(id)/children"},{"url":"#get-restapiauditloggetidchildrendocs","title":"GET /rest/api/auditlog/get/(id)/children/docs"},{"url":"#post-restapiauditlogsyncdocs","title":"POST /rest/api/auditlog/sync/docs"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/auth-provider"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#get-restapiauthprovideramattributelist","title":"GET /rest/api/authprovider/amAttributeList"},{"url":"#post-restapiauthproviderattributedelete","title":"POST /rest/api/authprovider/attribute/delete"},{"url":"#post-restapiauthproviderattributesave","title":"POST /rest/api/authprovider/attribute/save"},{"url":"#delete-restapiauthproviderattributeid","title":"DELETE /rest/api/authprovider/attribute/(id)"},{"url":"#get-restapiauthproviderattributetypes","title":"GET /rest/api/authprovider/attributeTypes"},{"url":"#post-restapiauthproviderauthentication-provider-with-ca-cert","title":"POST /rest/api/authprovider/authentication-provider-with-ca-cert"},{"url":"#post-restapiauthproviderdelete","title":"POST /rest/api/authprovider/delete"},{"url":"#get-restapiauthprovidergetid","title":"GET /rest/api/authprovider/get/(id)"},{"url":"#post-restapiauthprovidersave","title":"POST /rest/api/authprovider/save"},{"url":"#get-restapiauthprovidersearch","title":"GET /rest/api/authprovider/search"},{"url":"#delete-restapiauthproviderid","title":"DELETE /rest/api/authprovider/(id)"},{"url":"#post-restapiauthprovideridattributes","title":"POST /rest/api/authprovider/(id)/attributes"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/authentication-grouping"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#post-restapiauthgroupingdelete","title":"POST /rest/api/authGrouping/delete"},{"url":"#post-restapiauthgroupingdeleteauthlevelattribute","title":"POST /rest/api/authGrouping/deleteAuthLevelAttribute"},{"url":"#delete-restapiauthgroupingdeleteauthlevelattributeidgroupid","title":"DELETE /rest/api/authGrouping/deleteAuthLevelAttribute/(id)/(groupId)"},{"url":"#post-restapiauthgroupingsave","title":"POST /rest/api/authGrouping/save"},{"url":"#delete-restapiauthgroupingid","title":"DELETE /rest/api/authGrouping/(id)"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/challenge-response"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#post-restapichallengeresponsedelete","title":"POST /rest/api/challengeResponse/delete"},{"url":"#get-restapichallengeresponsegroups","title":"GET /rest/api/challengeResponse/groups"},{"url":"#get-restapichallengeresponsequestionquestionid","title":"GET /rest/api/challengeResponse/question/(questionId)"},{"url":"#post-restapichallengeresponsesave","title":"POST /rest/api/challengeResponse/save"},{"url":"#get-restapichallengeresponsesearch","title":"GET /rest/api/challengeResponse/search"},{"url":"#delete-restapichallengeresponseid","title":"DELETE /rest/api/challengeResponse/(id)"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/batch"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#delete-restapibatchdeleteid","title":"DELETE /rest/api/batch/delete/(id)"},{"url":"#post-restapibatchexecute","title":"POST /rest/api/batch/execute"},{"url":"#get-restapibatchfind","title":"GET /rest/api/batch/find"},{"url":"#post-restapibatchgetid","title":"POST /rest/api/batch/get/(id)"},{"url":"#post-restapibatchsave","title":"POST /rest/api/batch/save"},{"url":"#get-restapibatchschedulefind","title":"GET /rest/api/batch/schedule/find"},{"url":"#delete-restapibatchscheduleid","title":"DELETE /rest/api/batch/schedule/(id)"},{"url":"#post-restapibatchscheduleid","title":"POST /rest/api/batch/schedule/(id)"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/connector"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#delete-restapiconnectordeleteid","title":"DELETE /rest/api/connector/delete/(id)"},{"url":"#get-restapiconnectorfind","title":"GET /rest/api/connector/find"},{"url":"#get-restapiconnectorgetid","title":"GET /rest/api/connector/get/(id)"},{"url":"#post-restapiconnectorsave","title":"POST /rest/api/connector/save"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/content-provider"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#post-restapicontentprovidersdelete","title":"POST /rest/api/contentproviders/delete"},{"url":"#get-restapicontentprovidersgetid","title":"GET /rest/api/contentproviders/get/(id)"},{"url":"#get-restapicontentprovidersreq-auth-levels","title":"GET /rest/api/contentproviders/req-auth-levels"},{"url":"#post-restapicontentproviderssave","title":"POST /rest/api/contentproviders/save"},{"url":"#delete-restapicontentproviderssearch","title":"DELETE /rest/api/contentproviders/search"},{"url":"#get-restapicontentproviderssearch","title":"GET /rest/api/contentproviders/search"},{"url":"#head-restapicontentproviderssearch","title":"HEAD /rest/api/contentproviders/search"},{"url":"#options-restapicontentproviderssearch","title":"OPTIONS /rest/api/contentproviders/search"},{"url":"#patch-restapicontentproviderssearch","title":"PATCH /rest/api/contentproviders/search"},{"url":"#post-restapicontentproviderssearch","title":"POST /rest/api/contentproviders/search"},{"url":"#put-restapicontentproviderssearch","title":"PUT /rest/api/contentproviders/search"},{"url":"#delete-restapicontentprovidersid","title":"DELETE /rest/api/contentproviders/(id)"},{"url":"#post-restapicontentprovidersidcreatedefaulturipatterns","title":"POST /rest/api/contentproviders/(id)/createDefaultURIPatterns"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/email"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#get-restapimailtemplateget","title":"GET /rest/api/mailTemplate/get"},{"url":"#get-restapimailtemplategetall","title":"GET /rest/api/mailTemplate/getAll"},{"url":"#get-restapimailtemplategetmailtemplateproperties","title":"GET /rest/api/mailTemplate/getMailTemplateProperties"},{"url":"#post-restapimailtemplatesave","title":"POST /rest/api/mailTemplate/save"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/elastic-search"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#get-restapielasticsearchreindex","title":"GET /rest/api/elasticsearch/reindex"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/field"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#post-restapifieldsdelete","title":"POST /rest/api/fields/delete"},{"url":"#get-restapifieldsgetid","title":"GET /rest/api/fields/get/(id)"},{"url":"#get-restapifieldsgetidtemplates","title":"GET /rest/api/fields/get/(id)/templates"},{"url":"#post-restapifieldssave","title":"POST /rest/api/fields/save"},{"url":"#get-restapifieldssearch","title":"GET /rest/api/fields/search"},{"url":"#delete-restapifieldsid","title":"DELETE /rest/api/fields/(id)"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/groovy-manager"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#get-restapigroovymanagercompileall","title":"GET /rest/api/groovyManager/compileAll"},{"url":"#post-restapigroovymanagerexportselected","title":"POST /rest/api/groovyManager/exportSelected"},{"url":"#get-restapigroovymanagergetgroovyscripts","title":"GET /rest/api/groovyManager/getGroovyScripts"},{"url":"#post-restapigroovymanagerimport","title":"POST /rest/api/groovyManager/import"},{"url":"#get-restapigroovymanagerload","title":"GET /rest/api/groovyManager/load"},{"url":"#post-restapigroovymanagersave","title":"POST /rest/api/groovyManager/save"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/group"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#post-restapigroupsaddchildgroup","title":"POST /rest/api/groups/addChildGroup"},{"url":"#post-restapigroupsremovechildgroup","title":"POST /rest/api/groups/removeChildGroup"},{"url":"#post-restapigroupssave","title":"POST /rest/api/groups/save"},{"url":"#get-restapigroupssearch","title":"GET /rest/api/groups/search"},{"url":"#post-restapigroupsstartgroupbulkoperation","title":"POST /rest/api/groups/startGroupBulkOperation"},{"url":"#delete-restapigroupsgroupid","title":"DELETE /rest/api/groups/(groupId)"},{"url":"#get-restapigroupsgroupid","title":"GET /rest/api/groups/(groupId)"},{"url":"#get-restapigroupsgroupidchildren","title":"GET /rest/api/groups/(groupId)/children"},{"url":"#get-restapigroupsgroupidorganizations","title":"GET /rest/api/groups/(groupId)/organizations"},{"url":"#get-restapigroupsgroupidresources","title":"GET /rest/api/groups/(groupId)/resources"},{"url":"#get-restapigroupsgroupidroles","title":"GET /rest/api/groups/(groupId)/roles"},{"url":"#get-restapigroupsgroupidusers","title":"GET /rest/api/groups/(groupId)/users"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/idp-oauth"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#get-oauth2revoke","title":"GET /oauth2/revoke"},{"url":"#post-oauth2revoke","title":"POST /oauth2/revoke"},{"url":"#post-oauth2token","title":"POST /oauth2/token"},{"url":"#get-oauth2tokeninfo","title":"GET /oauth2/token/info"},{"url":"#post-oauth2tokenrefresh","title":"POST /oauth2/token/refresh"},{"url":"#get-oauth2tokenvalidate","title":"GET /oauth2/token/validate"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/4-sheduledtasks/1-provision-on-date"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/developerguide/8-api/managed-system"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#post-restapimanagedsysclone","title":"POST /rest/api/managedsys/clone"},{"url":"#post-restapimanagedsysdelete","title":"POST /rest/api/managedsys/delete"},{"url":"#get-restapimanagedsysgetid","title":"GET /rest/api/managedsys/get/(id)"},{"url":"#get-restapimanagedsyspolicymaps","title":"GET /rest/api/managedsys/policyMaps"},{"url":"#post-restapimanagedsyssave","title":"POST /rest/api/managedsys/save"},{"url":"#get-restapimanagedsyssearch","title":"GET /rest/api/managedsys/search"},{"url":"#post-restapimanagedsyspolicycreatedefaultpolicymapformanagedsystem","title":"POST /rest/api/managedSysPolicy/createDefaultPolicyMapForManagedSystem"},{"url":"#post-restapimanagedsyspolicydelete","title":"POST /rest/api/managedSysPolicy/delete"},{"url":"#post-restapimanagedsyspolicydeleteattrmaps","title":"POST /rest/api/managedSysPolicy/deleteAttrMaps"},{"url":"#post-restapimanagedsyspolicysave","title":"POST /rest/api/managedSysPolicy/save"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/menu"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#post-restapimenusave","title":"POST /rest/api/menu/save"},{"url":"#post-restapimenusaveroot","title":"POST /rest/api/menu/save/root"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/metadata"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#post-restapimetadataelementdelete","title":"POST /rest/api/metadata/element/delete"},{"url":"#post-restapimetadataelementsave","title":"POST /rest/api/metadata/element/save"},{"url":"#post-restapimetadatatypedelete","title":"POST /rest/api/metadata/type/delete"},{"url":"#post-restapimetadatatypesave","title":"POST /rest/api/metadata/type/save"}]}]}]}}},{"node":{"fields":{"slug":"/whatsnew/20-v2026.3.3"},"tableOfContents":{"items":[{"url":"#new-features","title":"New features","items":[{"url":"#rule-management-and-configuration","title":"Rule management and configuration"},{"url":"#installer-and-deployment","title":"Installer and deployment"},{"url":"#active-directory-and-performance-optimization","title":"Active Directory and performance optimization"},{"url":"#logging-improvements","title":"Logging improvements"}]},{"url":"#enhancements-and-tasks","title":"Enhancements and tasks","items":[{"url":"#devops-and-deployment","title":"DevOps and deployment"},{"url":"#api-and-integration","title":"API and integration"},{"url":"#connector-improvements","title":"Connector improvements"}]},{"url":"#bug-fixes","title":"Bug fixes","items":[{"url":"#installer-and-deployment-1","title":"Installer and deployment"},{"url":"#authentication-and-user-experience","title":"Authentication and user experience"},{"url":"#active-directory-and-synchronization","title":"Active Directory and synchronization"},{"url":"#messaging-and-system-load","title":"Messaging and system load"},{"url":"#access-certification-and-performance","title":"Access certification and performance"},{"url":"#ui-and-workflow","title":"UI and workflow"},{"url":"#security","title":"Security"},{"url":"#audit-and-logging","title":"Audit and logging"}]},{"url":"#minor-improvements","title":"Minor improvements"}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/oauth"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#post-restapioauthsave","title":"POST /rest/api/oauth/save"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/it-policy"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#get-restapiitpolicy","title":"GET /rest/api/itpolicy/"},{"url":"#post-restapiitpolicyreset","title":"POST /rest/api/itpolicy/reset"},{"url":"#post-restapiitpolicysave","title":"POST /rest/api/itpolicy/save"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/organization-type"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#get-restapiorganization-typetypes","title":"GET /rest/api/organization-type/types"},{"url":"#post-restapiorganization-typetypes","title":"POST /rest/api/organization-type/types"},{"url":"#delete-restapiorganization-typetypesid","title":"DELETE /rest/api/organization-type/types/(id)"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/idp-rest"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#get-restapiauditlogexportlogs","title":"GET /rest/api/auditlog/exportLogs"},{"url":"#get-restapiauditlogfindlogs","title":"GET /rest/api/auditlog/findLogs"},{"url":"#get-restapiauthlogout","title":"GET /rest/api/auth/logout"},{"url":"#post-restapiauthpubliclogin","title":"POST /rest/api/auth/public/login"},{"url":"#post-restapiauthpublicloginreturntype","title":"POST /rest/api/auth/public/login/(returnType)"},{"url":"#get-restapiitpolicy","title":"GET /rest/api/itpolicy/"},{"url":"#get-restapimanagedsysgetid","title":"GET /rest/api/managedsys/get/(id)"},{"url":"#get-restapimanagedsyspolicymaps","title":"GET /rest/api/managedsys/policyMaps"},{"url":"#get-restapimanagedsyssearch","title":"GET /rest/api/managedsys/search"},{"url":"#post-restapiorphansdelete-orphans","title":"POST /rest/api/orphans/delete-orphans"},{"url":"#post-restapiorphansorphan-search","title":"POST /rest/api/orphans/orphan-search"},{"url":"#post-restapiorphansorphans-link","title":"POST /rest/api/orphans/orphans-link"},{"url":"#post-restapiprovsaveuser","title":"POST /rest/api/prov/saveUser"},{"url":"#post-restapiprovtemplateuser","title":"POST /rest/api/prov/template/user"},{"url":"#get-restapiusersapplications","title":"GET /rest/api/users/applications"},{"url":"#get-restapiusersattributelist","title":"GET /rest/api/users/attributeList"},{"url":"#get-restapiusersemployeetypes","title":"GET /rest/api/users/employeeTypes"},{"url":"#get-restapiusersgetallsuperiors","title":"GET /rest/api/users/getAllSuperiors"},{"url":"#get-restapiusersjobcodes","title":"GET /rest/api/users/jobCodes"},{"url":"#get-restapiuserssearch","title":"GET /rest/api/users/search"},{"url":"#post-restapiuserssearch","title":"POST /rest/api/users/search"},{"url":"#get-restapiuserssearchmetadata","title":"GET /rest/api/users/search/metadata"},{"url":"#post-restapiuserssearchsubordinates","title":"POST /rest/api/users/searchSubordinates"},{"url":"#post-restapiuserssearchsuperiors","title":"POST /rest/api/users/searchSuperiors"},{"url":"#get-restapiuserssuperior-types","title":"GET /rest/api/users/superior-types"},{"url":"#get-restapiusersusersecondarystatuses","title":"GET /rest/api/users/userSecondaryStatuses"},{"url":"#get-restapiusersuserstatuses","title":"GET /rest/api/users/userStatuses"},{"url":"#get-restapiusersusertypes","title":"GET /rest/api/users/userTypes"},{"url":"#get-restapiusersuseridgroups","title":"GET /rest/api/users/(userId)/groups"},{"url":"#get-restapiusersuseridorganizations","title":"GET /rest/api/users/(userId)/organizations"},{"url":"#get-restapiusersuseridresources","title":"GET /rest/api/users/(userId)/resources"},{"url":"#get-restapiusersuseridroles","title":"GET /rest/api/users/(userId)/roles"},{"url":"#get-restapiusersuseridsubordinates","title":"GET /rest/api/users/(userId)/subordinates"},{"url":"#get-restapiusersuseridsubordinatesdirect","title":"GET /rest/api/users/(userId)/subordinates/direct"},{"url":"#get-restapiusersuseridsuperiors","title":"GET /rest/api/users/(userId)/superiors"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/page-template"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#post-restapipagetemplatedelete","title":"POST /rest/api/pagetemplate/delete"},{"url":"#get-restapipagetemplategetfieldid","title":"GET /rest/api/pagetemplate/get/field/(id)"},{"url":"#get-restapipagetemplategetid","title":"GET /rest/api/pagetemplate/get/(id)"},{"url":"#get-restapipagetemplategetidfieldtypes","title":"GET /rest/api/pagetemplate/get/(id)/field/types"},{"url":"#get-restapipagetemplategetidfields","title":"GET /rest/api/pagetemplate/get/(id)/fields"},{"url":"#get-restapipagetemplategetidpatterns","title":"GET /rest/api/pagetemplate/get/(id)/patterns"},{"url":"#get-restapipagetemplategetidtemplatefields","title":"GET /rest/api/pagetemplate/get/(id)/templateFields"},{"url":"#post-restapipagetemplatesave","title":"POST /rest/api/pagetemplate/save"},{"url":"#get-restapipagetemplatesearch","title":"GET /rest/api/pagetemplate/search"},{"url":"#delete-restapipagetemplateid","title":"DELETE /rest/api/pagetemplate/(id)"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/organization"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#post-restapiorganizationsaddchildorganization","title":"POST /rest/api/organizations/addChildOrganization"},{"url":"#post-restapiorganizationsaddgrouptoorganization","title":"POST /rest/api/organizations/addGroupToOrganization"},{"url":"#post-restapiorganizationsaddresourcetoorganization","title":"POST /rest/api/organizations/addResourceToOrganization"},{"url":"#post-restapiorganizationsaddroletoorganization","title":"POST /rest/api/organizations/addRoleToOrganization"},{"url":"#get-restapiorganizationsfind","title":"GET /rest/api/organizations/find"},{"url":"#post-restapiorganizationsgetallowedparentorganizationtypes","title":"POST /rest/api/organizations/getAllowedParentOrganizationTypes"},{"url":"#post-restapiorganizationslocationdelete","title":"POST /rest/api/organizations/location/delete"},{"url":"#post-restapiorganizationslocationsave","title":"POST /rest/api/organizations/location/save"},{"url":"#delete-restapiorganizationslocationid","title":"DELETE /rest/api/organizations/location/(id)"},{"url":"#get-restapiorganizationsorganization-types","title":"GET /rest/api/organizations/organization-types"},{"url":"#post-restapiorganizationsorganizationtypechildadd","title":"POST /rest/api/organizations/organizationTypeChildAdd"},{"url":"#post-restapiorganizationsorganizationtypechilddelete","title":"POST /rest/api/organizations/organizationTypeChildDelete"},{"url":"#delete-restapiorganizationsorganizationtypechilddeletetypeidmembertypeid","title":"DELETE /rest/api/organizations/organizationTypeChildDelete/(typeId)/(memberTypeId)"},{"url":"#post-restapiorganizationsremovechildorganization","title":"POST /rest/api/organizations/removeChildOrganization"},{"url":"#delete-restapiorganizationsremovechildorganizationorganizationidchildorganizationid","title":"DELETE /rest/api/organizations/removeChildOrganization/(organizationId)/(childOrganizationId)"},{"url":"#post-restapiorganizationsremovegroupfromorganization","title":"POST /rest/api/organizations/removeGroupFromOrganization"},{"url":"#delete-restapiorganizationsremovegroupfromorganizationgroupidorganizationid","title":"DELETE /rest/api/organizations/removeGroupFromOrganization/(groupId)/(organizationId)"},{"url":"#post-restapiorganizationsremoveresourcefromorganization","title":"POST /rest/api/organizations/removeResourceFromOrganization"},{"url":"#delete-restapiorganizationsremoveresourcefromorganizationresourceidorganizationid","title":"DELETE /rest/api/organizations/removeResourceFromOrganization/(resourceId)/(organizationId)"},{"url":"#post-restapiorganizationsremoverolefromorganization","title":"POST /rest/api/organizations/removeRoleFromOrganization"},{"url":"#delete-restapiorganizationsremoverolefromorganizationroleidorganizationid","title":"DELETE /rest/api/organizations/removeRoleFromOrganization/(roleId)/(organizationId)"},{"url":"#post-restapiorganizationssave","title":"POST /rest/api/organizations/save"},{"url":"#get-restapiorganizationssearchtreegrid","title":"GET /rest/api/organizations/search/treegrid"},{"url":"#delete-restapiorganizationsid","title":"DELETE /rest/api/organizations/(id)"},{"url":"#get-restapiorganizationsid","title":"GET /rest/api/organizations/(id)"},{"url":"#get-restapiorganizationsorganizationididentities","title":"GET /rest/api/organizations/(organizationId)/identities"},{"url":"#get-restapiorganizationsorganizationidlocations","title":"GET /rest/api/organizations/(organizationId)/locations"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/property-value"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#get-restapipropertyauditactions","title":"GET /rest/api/property/auditActions"},{"url":"#post-restapipropertygetpropertyvalues","title":"POST /rest/api/property/getPropertyValues"},{"url":"#get-restapipropertyvalue","title":"GET /rest/api/property/value"},{"url":"#get-restapipropertyvalues","title":"GET /rest/api/property/values"},{"url":"#post-restapipropertyvalues","title":"POST /rest/api/property/values"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/report"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#post-restapireportdelete","title":"POST /rest/api/report/delete"},{"url":"#post-restapireportparamdelete","title":"POST /rest/api/report/param/delete"},{"url":"#post-restapireportparamsave","title":"POST /rest/api/report/param/save"},{"url":"#delete-restapireportparamid","title":"DELETE /rest/api/report/param/(id)"},{"url":"#post-restapireportsave","title":"POST /rest/api/report/save"},{"url":"#get-restapireportsearch","title":"GET /rest/api/report/search"},{"url":"#post-restapireportvalidate","title":"POST /rest/api/report/validate"},{"url":"#delete-restapireportid","title":"DELETE /rest/api/report/(id)"},{"url":"#get-restapireportreportidparams","title":"GET /rest/api/report/(reportId)/params"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/policy"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#post-restapipolicydeleteattributepolicy","title":"POST /rest/api/policy/deleteAttributePolicy"},{"url":"#post-restapipolicydeleteauthenticationpolicy","title":"POST /rest/api/policy/deleteAuthenticationPolicy"},{"url":"#post-restapipolicydeletepasswordpolicy","title":"POST /rest/api/policy/deletePasswordPolicy"},{"url":"#get-restapipolicygetid","title":"GET /rest/api/policy/get/(id)"},{"url":"#get-restapipolicygetpasswordattributes","title":"GET /rest/api/policy/getPasswordAttributes"},{"url":"#get-restapipolicynew","title":"GET /rest/api/policy/new"},{"url":"#post-restapipolicysave-password-dictionary","title":"POST /rest/api/policy/save-password-dictionary"},{"url":"#post-restapipolicysaveattributepolicy","title":"POST /rest/api/policy/saveAttributePolicy"},{"url":"#post-restapipolicysaveauthenticationpolicy","title":"POST /rest/api/policy/saveAuthenticationPolicy"},{"url":"#post-restapipolicysavepasswordpolicy","title":"POST /rest/api/policy/savePasswordPolicy"},{"url":"#get-restapipolicysearch","title":"GET /rest/api/policy/search"},{"url":"#delete-restapipolicyid","title":"DELETE /rest/api/policy/(id)"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/resource-type"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#post-restapiresourcetypedelete","title":"POST /rest/api/resourceType/delete"},{"url":"#get-restapiresourcetypegetresourcetypeid","title":"GET /rest/api/resourceType/get/(resourceTypeId)"},{"url":"#get-restapiresourcetypegetall","title":"GET /rest/api/resourceType/getAll"},{"url":"#post-restapiresourcetypesave","title":"POST /rest/api/resourceType/save"},{"url":"#delete-restapiresourcetypeid","title":"DELETE /rest/api/resourceType/(id)"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/resource"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#put-restapiresourcesadd-resource-to-organization","title":"PUT /rest/api/resources/add-resource-to-organization"},{"url":"#post-restapiresourcesaddchildresource","title":"POST /rest/api/resources/addChildResource"},{"url":"#post-restapiresourcesaddgrouptoresource","title":"POST /rest/api/resources/addGroupToResource"},{"url":"#post-restapiresourcesaddroletoresource","title":"POST /rest/api/resources/addRoleToResource"},{"url":"#delete-restapiresourcesdelete-resource-from-organizationresourceidorganizationid","title":"DELETE /rest/api/resources/delete-resource-from-organization/(resourceId)/(organizationId)"},{"url":"#post-restapiresourcesdeletegroupfromresource","title":"POST /rest/api/resources/deleteGroupFromResource"},{"url":"#delete-restapiresourcesdeletegroupfromresourceresourceidgroupid","title":"DELETE /rest/api/resources/deleteGroupFromResource/(resourceId)/(groupId)"},{"url":"#post-restapiresourcesdeprovisionresourcebygroup","title":"POST /rest/api/resources/deprovisionResourceByGroup"},{"url":"#post-restapiresourcesdeprovisionresourcebyrole","title":"POST /rest/api/resources/deprovisionResourceByRole"},{"url":"#post-restapiresourcesprovisionresourcebygroup","title":"POST /rest/api/resources/provisionResourceByGroup"},{"url":"#post-restapiresourcesprovisionresourcebyrole","title":"POST /rest/api/resources/provisionResourceByRole"},{"url":"#post-restapiresourcesremovechildresource","title":"POST /rest/api/resources/removeChildResource"},{"url":"#delete-restapiresourcesremovechildresourceresourceidmemberresourceid","title":"DELETE /rest/api/resources/removeChildResource/(resourceId)/(memberResourceId)"},{"url":"#post-restapiresourcesremoverolefromresource","title":"POST /rest/api/resources/removeRoleFromResource"},{"url":"#delete-restapiresourcesremoverolefromresourceresourceidroleid","title":"DELETE /rest/api/resources/removeRoleFromResource/(resourceId)/(roleId)"},{"url":"#post-restapiresourcessave","title":"POST /rest/api/resources/save"},{"url":"#get-restapiresourcessearch","title":"GET /rest/api/resources/search"},{"url":"#delete-restapiresourcesid","title":"DELETE /rest/api/resources/(id)"},{"url":"#get-restapiresourcesid","title":"GET /rest/api/resources/(id)"},{"url":"#get-restapiresourcesidchildren","title":"GET /rest/api/resources/(id)/children"},{"url":"#get-restapiresourcesidgroups","title":"GET /rest/api/resources/(id)/groups"},{"url":"#get-restapiresourcesidorganizations","title":"GET /rest/api/resources/(id)/organizations"},{"url":"#get-restapiresourcesidparents","title":"GET /rest/api/resources/(id)/parents"},{"url":"#get-restapiresourcesidroles","title":"GET /rest/api/resources/(id)/roles"},{"url":"#get-restapiresourcesidusers","title":"GET /rest/api/resources/(id)/users"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/role"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#post-restapirolesaddchildrole","title":"POST /rest/api/roles/addChildRole"},{"url":"#post-restapirolesaddgrouptorole","title":"POST /rest/api/roles/addGroupToRole"},{"url":"#post-restapirolesclone","title":"POST /rest/api/roles/clone"},{"url":"#post-restapirolesremovechildrole","title":"POST /rest/api/roles/removeChildRole"},{"url":"#delete-restapirolesremovechildroleroleidchildroleid","title":"DELETE /rest/api/roles/removeChildRole/(roleId)/(childRoleId)"},{"url":"#post-restapirolesremovegroupfromrole","title":"POST /rest/api/roles/removeGroupFromRole"},{"url":"#delete-restapirolesremovegroupfromroleroleidgroupid","title":"DELETE /rest/api/roles/removeGroupFromRole/(roleId)/(groupId)"},{"url":"#post-restapirolessave","title":"POST /rest/api/roles/save"},{"url":"#get-restapirolessearch","title":"GET /rest/api/roles/search"},{"url":"#delete-restapirolesid","title":"DELETE /rest/api/roles/(id)"},{"url":"#get-restapirolesid","title":"GET /rest/api/roles/(id)"},{"url":"#get-restapirolesidchildren","title":"GET /rest/api/roles/(id)/children"},{"url":"#get-restapirolesidgroups","title":"GET /rest/api/roles/(id)/groups"},{"url":"#get-restapirolesidorganizations","title":"GET /rest/api/roles/(id)/organizations"},{"url":"#get-restapirolesidparents","title":"GET /rest/api/roles/(id)/parents"},{"url":"#get-restapirolesidresources","title":"GET /rest/api/roles/(id)/resources"},{"url":"#get-restapirolesidusers","title":"GET /rest/api/roles/(id)/users"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/sync-config"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#get-restapisyncconfigcsvgetid","title":"GET /rest/api/syncconfig/csv/get/(id)"},{"url":"#get-restapisyncconfigcsvlist","title":"GET /rest/api/syncconfig/csv/list"},{"url":"#get-restapisyncconfigcsvpreviewid","title":"GET /rest/api/syncconfig/csv/preview/(id)"},{"url":"#delete-restapisyncconfigdeleteid","title":"DELETE /rest/api/syncconfig/delete/(id)"},{"url":"#get-restapisyncconfiggetid","title":"GET /rest/api/syncconfig/get/(id)"},{"url":"#post-restapisyncconfigsave","title":"POST /rest/api/syncconfig/save"},{"url":"#put-restapisyncconfigsave","title":"PUT /rest/api/syncconfig/save"},{"url":"#get-restapisyncconfigsearch","title":"GET /rest/api/syncconfig/search"},{"url":"#post-restapisyncconfigupload","title":"POST /rest/api/syncconfig/upload"},{"url":"#get-restapisyncconfigidstartsynch","title":"GET /rest/api/syncconfig/(id)/startSynch"},{"url":"#get-restapisyncconfigidtestconnect","title":"GET /rest/api/syncconfig/(id)/testConnect"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/ui-theme"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#post-restapiuithemedelete","title":"POST /rest/api/uiTheme/delete"},{"url":"#get-restapiuithemegetthemeid","title":"GET /rest/api/uiTheme/get/(themeId)"},{"url":"#post-restapiuithemesave","title":"POST /rest/api/uiTheme/save"},{"url":"#delete-restapiuithemeuithemeidclient-resourceclientresourcetype","title":"DELETE /rest/api/uiTheme/(uiThemeId)/client-resource/(clientResourceType)"},{"url":"#post-restapiuithemeuithemeidclient-resourceclientresourcetypeupload","title":"POST /rest/api/uiTheme/(uiThemeId)/client-resource/(clientResourceType)/upload"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/sync-rest"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#post-syncrun","title":"POST /sync/run"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/system"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#get-restapisystemesbinfo","title":"GET /rest/api/system/esb/info"},{"url":"#get-restapisystemuiinfo","title":"GET /rest/api/system/ui/info"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/uri-pattern"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#post-restapiuripatterndelete","title":"POST /rest/api/uriPattern/delete"},{"url":"#get-restapiuripatterngetid","title":"GET /rest/api/uriPattern/get/(id)"},{"url":"#post-restapiuripatternsave","title":"POST /rest/api/uriPattern/save"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/9-synchronization/1-autoprov"},"tableOfContents":{"items":[{"url":"#scripts-to-automate-user-provisioning","title":"Scripts to automate user provisioning","items":[{"items":[{"url":"#example-data","title":"Example Data","items":[{"url":"#assumptions","title":"Assumptions"}]}]},{"url":"#user-life-cycle-events","title":"User life cycle events"}]}]}}},{"node":{"fields":{"slug":"/developerguide/8-api/user"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#post-restapiusersadd-subordinate","title":"POST /rest/api/users/add-subordinate"},{"url":"#post-restapiusersadd-superior","title":"POST /rest/api/users/add-superior"},{"url":"#get-restapiusersapplications","title":"GET /rest/api/users/applications"},{"url":"#get-restapiusersattributelist","title":"GET /rest/api/users/attributeList"},{"url":"#get-restapiusersemployeetypes","title":"GET /rest/api/users/employeeTypes"},{"url":"#post-restapiusersentitlementsaddusertogroup","title":"POST /rest/api/users/entitlements/addUserToGroup"},{"url":"#post-restapiusersentitlementsaddusertoorganization","title":"POST /rest/api/users/entitlements/addUserToOrganization"},{"url":"#post-restapiusersentitlementsaddusertoresource","title":"POST /rest/api/users/entitlements/addUserToResource"},{"url":"#post-restapiusersentitlementsaddusertorole","title":"POST /rest/api/users/entitlements/addUserToRole"},{"url":"#post-restapiusersentitlementsremoveuserfromgroup","title":"POST /rest/api/users/entitlements/removeUserFromGroup"},{"url":"#post-restapiusersentitlementsremoveuserfromorganization","title":"POST /rest/api/users/entitlements/removeUserFromOrganization"},{"url":"#delete-restapiusersentitlementsremoveuserfromresourceuseridresourceid","title":"DELETE /rest/api/users/entitlements/removeUserFromResource/(userId)/(resourceId)"},{"url":"#delete-restapiusersentitlementsremoveuserfromroleuseridroleid","title":"DELETE /rest/api/users/entitlements/removeUserFromRole/(userId)/(roleId)"},{"url":"#get-restapiusersgetallsuperiors","title":"GET /rest/api/users/getAllSuperiors"},{"url":"#get-restapiusersjobcodes","title":"GET /rest/api/users/jobCodes"},{"url":"#post-restapiusersremove-subordinate","title":"POST /rest/api/users/remove-subordinate"},{"url":"#post-restapiusersremove-superior","title":"POST /rest/api/users/remove-superior"},{"url":"#post-restapiusersreplace-subordinate","title":"POST /rest/api/users/replace-subordinate"},{"url":"#post-restapiusersreplace-superior","title":"POST /rest/api/users/replace-superior"},{"url":"#get-restapiuserssearch","title":"GET /rest/api/users/search"},{"url":"#post-restapiuserssearch","title":"POST /rest/api/users/search"},{"url":"#get-restapiuserssearchmetadata","title":"GET /rest/api/users/search/metadata"},{"url":"#post-restapiuserssearchsubordinates","title":"POST /rest/api/users/searchSubordinates"},{"url":"#post-restapiuserssearchsuperiors","title":"POST /rest/api/users/searchSuperiors"},{"url":"#get-restapiuserssuperior-types","title":"GET /rest/api/users/superior-types"},{"url":"#get-restapiusersusersecondarystatuses","title":"GET /rest/api/users/userSecondaryStatuses"},{"url":"#get-restapiusersuserstatuses","title":"GET /rest/api/users/userStatuses"},{"url":"#get-restapiusersusertypes","title":"GET /rest/api/users/userTypes"},{"url":"#get-restapiusersuseridgroups","title":"GET /rest/api/users/(userId)/groups"},{"url":"#get-restapiusersuseridorganizations","title":"GET /rest/api/users/(userId)/organizations"},{"url":"#get-restapiusersuseridresources","title":"GET /rest/api/users/(userId)/resources"},{"url":"#get-restapiusersuseridroles","title":"GET /rest/api/users/(userId)/roles"},{"url":"#get-restapiusersuseridsubordinates","title":"GET /rest/api/users/(userId)/subordinates"},{"url":"#get-restapiusersuseridsubordinatesdirect","title":"GET /rest/api/users/(userId)/subordinates/direct"},{"url":"#get-restapiusersuseridsuperiors","title":"GET /rest/api/users/(userId)/superiors"}]}]}]}}},{"node":{"fields":{"slug":"/developerguide/9-synchronization/2-import"},"tableOfContents":{"items":[{"url":"#importing-user-and-entitlements-from-your-applications","title":"Importing user and entitlements from your applications","items":[{"url":"#example-scripts-to-import-your-entitlements","title":"Example Scripts to import your entitlements"},{"url":"#developing-your-own-import-scripts","title":"Developing your own import scripts"}]}]}}},{"node":{"fields":{"slug":"/developerguide/9-synchronization/3-importing_groups"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/end-user-guide-for-selfservice/2-selfservice/1-forgotpassword"},"tableOfContents":{"items":[{"url":"#resetting-password-using-challenge-response-questions","title":"Resetting password using challenge response questions"},{"url":"#resetting-password-using-a-one-time-link-via-e-mail","title":"Resetting password using a one-time link via e-mail"}]}}},{"node":{"fields":{"slug":"/end-user-guide-for-selfservice/2-selfservice/3-changepassword"},"tableOfContents":{"items":[{"url":"#change-password-across-all-applications","title":"Change password across all applications"},{"url":"#change-password-for-a-specific-application","title":"Change password for a specific application"}]}}},{"node":{"fields":{"slug":"/end-user-guide-for-selfservice/2-selfservice/4-outofoffice"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/end-user-guide-for-selfservice/2-selfservice/2-updateprofile"},"tableOfContents":{"items":[{"url":"#updating-the-profile","title":"Updating the profile"},{"url":"#updating-the-profile-picture","title":"Updating the profile picture"}]}}},{"node":{"fields":{"slug":"/developerguide/9-synchronization/4-relations-with-manager"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/end-user-guide-for-selfservice/2-selfservice/5-forgotusername"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/end-user-guide-for-selfservice/2-selfservice/6-updatesecquestions"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/end-user-guide-for-selfservice/4-createrequest/1-servicecatalog"},"tableOfContents":{"items":[{"url":"#selecting-a-user-to-create-a-request","title":"Selecting a user to create a request","items":[{"url":"#creating-a-request-for-yourself","title":"Creating a request for yourself"},{"url":"#creating-a-request-for-direct-report","title":"Creating a request for direct report"},{"url":"#creating-a-request-for-any-user-in-the-system","title":"Creating a request for any user in the system"}]},{"url":"#creating-a-request","title":"Creating a request"},{"url":"#monitoring-a-request","title":"Monitoring a request"},{"url":"#integrated-create-user-request-helper-groovy-script","title":"Integrated create user request helper Groovy script","items":[{"url":"#example-groovy-script","title":"Example Groovy script"}]}]}}},{"node":{"fields":{"slug":"/end-user-guide-for-selfservice/4-createrequest/10-positionchange"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/end-user-guide-for-selfservice/4-createrequest/11-accessprofiles"},"tableOfContents":{"items":[{"url":"#creating-a-new-access-profiles","title":"Creating a new access profiles"},{"url":"#modifying-existing-access-profiles","title":"Modifying existing access profiles"}]}}},{"node":{"fields":{"slug":"/end-user-guide-for-selfservice/4-createrequest/12-bulkupload"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/end-user-guide-for-selfservice/4-createrequest/5-approverequest"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/end-user-guide-for-selfservice/4-createrequest/2-jobprofile"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/end-user-guide-for-selfservice/4-createrequest/6-requestadministration"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/end-user-guide-for-selfservice/4-createrequest/7-requesthistory"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/end-user-guide-for-selfservice/4-createrequest/9-newuser"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/end-user-guide-for-selfservice/7-useraccess/1-viewmyaccess"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/end-user-guide-for-selfservice/4-createrequest/8-newgroup"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/end-user-guide-for-selfservice/7-useraccess/2-directreports"},"tableOfContents":{"items":[{"items":[{"url":"#active-and-terminated-users","title":"Active and terminated users"}]},{"url":"#requesting-access","title":"Requesting access"},{"url":"#reviewing-access","title":"Reviewing access"},{"url":"#enablingdisabling-user","title":"Enabling/disabling user"},{"url":"#resetting-password","title":"Resetting password"},{"url":"#managing-identities","title":"Managing identities","items":[{"url":"#refreshing-identity-status","title":"Refreshing identity status"}]},{"url":"#initiating-bulk-request","title":"Initiating bulk request"},{"url":"#contractor-operations","title":"Contractor operations"}]}}},{"node":{"fields":{"slug":"/end-user-guide-for-selfservice/7-useraccess/3-UAR-in-Self-Service"},"tableOfContents":{"items":[{"url":"#user-access-review-module-entitlement-view","title":"User Access Review Module Entitlement view"},{"url":"#completion-percentage-calculation","title":"Completion percentage calculation"}]}}},{"node":{"fields":{"slug":"/getting-started/31-planning-workforce/1-designrole"},"tableOfContents":{"items":[{"url":"#role-discovery","title":"Role discovery"},{"url":"#role-design","title":"Role design","items":[{"url":"#role-design-based-on-inheritance","title":"Role design based on inheritance"},{"url":"#hybrid-role-design","title":"Hybrid role design"},{"url":"#documenting-the-role-design","title":"Documenting the role design"}]}]}}},{"node":{"fields":{"slug":"/getting-started/31-planning-workforce/2-openiam-access-role"},"tableOfContents":{"items":[{"url":"#define-what-a-person-can-do-in-openiam","title":"Define what a person can do in OpenIAM","items":[{"url":"#selfservice-portal-access","title":"SelfService portal access"},{"url":"#admin-portal-access","title":"Admin portal access"}]}]}}},{"node":{"fields":{"slug":"/getting-started/31-planning-workforce/3-connector-planning"},"tableOfContents":{"items":[{"url":"#1-introduction","title":"1. Introduction"},{"url":"#2-supported-functionality","title":"2. Supported Functionality"},{"url":"#3-authoritative-source--data-mapping","title":"3. Authoritative Source & Data Mapping"},{"url":"#4-importing-entitlements","title":"4. Importing Entitlements"},{"url":"#5-importing-users-and-their-entitlements","title":"5. Importing Users and Their Entitlements"},{"url":"#6-user-provisioning-operations","title":"6. User Provisioning Operations"},{"url":"#7-enabledisable-user","title":"7. Enable/Disable User"},{"url":"#8-password-management","title":"8. Password Management"},{"url":"#9-searchfind-operations","title":"9. Search/Find Operations"},{"url":"#10-additional-considerations","title":"10. Additional Considerations"}]}}},{"node":{"fields":{"slug":"/getting-started/4-application-onboarding/1-connect"},"tableOfContents":{"items":[{"url":"#establishing-a-connection","title":"Establishing a connection"}]}}},{"node":{"fields":{"slug":"/getting-started/4-application-onboarding/2-importentitlements"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/getting-started/4-application-onboarding/3-importusers-and-entitlements"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/getting-started/6-automatedprovisioning/1-jml"},"tableOfContents":{"items":[{"url":"#joiners","title":"Joiners"},{"url":"#movers","title":"Movers","items":[{"items":[{"url":"#option-1","title":"Option 1"},{"url":"#option-2","title":"Option 2"},{"url":"#option-3","title":"Option 3"}]}]},{"url":"#leavers","title":"Leavers"}]}}},{"node":{"fields":{"slug":"/getting-started/6-automatedprovisioning/2-tutorial"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/1-singlenode"},"tableOfContents":{"items":[{"items":[{"url":"#ssh-into-your-vm","title":"SSH into your VM"},{"url":"#minimum-system-requirements","title":"Minimum system requirements"},{"url":"#software-requirements","title":"Software requirements","items":[{"url":"#validate-your-environment","title":"Validate your environment"}]}]},{"url":"#prepare-the-host-system-for-installation","title":"Prepare the host system for installation","items":[{"url":"#install-required-packages","title":"Install required packages"},{"url":"#next-steps","title":"Next steps"},{"url":"#directory-structure","title":"Directory structure"}]}]}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/10-ha-rpm"},"tableOfContents":{"items":[{"url":"#example-ha-deployment-architecture","title":"Example HA deployment architecture","items":[{"url":"#three-node-cluster","title":"Three-node cluster"},{"url":"#n-tier-configuration","title":"N-tier configuration"}]},{"url":"#hardwarevm-requirements","title":"Hardware/VM requirements"},{"url":"#software-requirements","title":"Software requirements"},{"url":"#installing-openiam-in-a-three-node-cluster","title":"Installing OpenIAM in a three-node cluster","items":[{"url":"#prior-to-installation","title":"Prior to installation"}]},{"url":"#firewall-rules-matrix","title":"Firewall rules matrix","items":[{"url":"#installation","title":"Installation"}]},{"url":"#startingstopping-openiam","title":"Starting/Stopping OpenIAM"},{"url":"#port-communication-matrix","title":"Port communication matrix"},{"url":"#load-balancer-configuration","title":"Load balancer configuration"}]}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/11-configuration-options"},"tableOfContents":{"items":[{"url":"#logging-level-of-openiam-modules","title":"Logging level of OpenIAM modules"}]}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/2-rproxy"},"tableOfContents":{"items":[{"url":"#install-the-rproxy-module","title":"Install the rProxy module"},{"url":"#configure-the-rproxy","title":"Configure the rProxy"}]}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/12-migrating-onpremises-to-cloud"},"tableOfContents":{"items":[{"url":"#prerequisites","title":"Prerequisites"},{"url":"#migration-process","title":"Migration process"},{"url":"#post-migration","title":"Post-migration"}]}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/5-ports"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/4-backup"},"tableOfContents":{"items":[{"url":"#backup-procedures","title":"Backup procedures","items":[{"url":"#backup-the-database","title":"Backup the database"},{"url":"#download-the-backup-utility","title":"Download the backup utility"},{"url":"#update-the-env-file","title":"Update the env file"},{"url":"#run-the-backup-process","title":"Run the backup process"}]},{"url":"#restoring-procedures","title":"Restoring procedures","items":[{"url":"#stop-openiam","title":"Stop OpenIAM"},{"url":"#restore-your-database","title":"Restore your database","items":[{"url":"#mariadb","title":"MariaDB"},{"url":"#postgresql","title":"PostgreSQL"}]},{"url":"#restore-the-openiam-application","title":"Restore the openiam application"}]}]}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/6-upgrading"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/7-remoteDB"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/8-ssl"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/6-migrating-non-production-to-production-environment"},"tableOfContents":{"items":[{"url":"#migrating-rpm-deployment","title":"Migrating RPM deployment","items":[{"items":[{"url":"#option-with-db-migration","title":"Option with DB migration"},{"url":"#option-without-db-migration","title":"Option without DB migration"}]}]}]}}},{"node":{"fields":{"slug":"/installation/2-docker-installation/1-https"},"tableOfContents":{"items":[{"items":[{"url":"#generate-a-certificate","title":"Generate a certificate"},{"url":"#update-rproxy-user-access","title":"Update rProxy user access"},{"url":"#create-the-folders-to-deploy-the-certificate-on-the-openiam-host","title":"Create the folders to deploy the certificate on the OpenIAM host"},{"url":"#deploy-the-certificate","title":"Deploy the certificate"},{"url":"#update-openiam-configuration","title":"Update OpenIAM configuration"}]},{"url":"#validating-the-configuration","title":"Validating the configuration","items":[{"items":[{"url":"#inspect-the-rproxy-container","title":"Inspect the rProxy container"},{"url":"#testing-using-curl","title":"Testing using Curl"},{"url":"#from-the-browser","title":"From the browser"}]}]}]}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/9-rabbitssl"},"tableOfContents":{"items":[{"url":"#rabbitmq-configuration","title":"RabbitMQ configuration"},{"url":"#enabling-tls-connection-to-rabbitmq","title":"Enabling TLS connection to RabbitMQ"},{"url":"#openiam-configuration","title":"OpenIAM Configuration"}]}}},{"node":{"fields":{"slug":"/installation/2-docker-installation/3-upgrading"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/installation/2-docker-installation/4-YAML-files"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/installation/2-docker-installation/5-docker-swarm-backup"},"tableOfContents":{"items":[{"url":"#backup","title":"Backup","items":[{"url":"#database","title":"Database","items":[{"items":[{"url":"#mariadb","title":"MariaDB"},{"url":"#postgresql","title":"PostgreSQL"}]}]},{"url":"#opensearch","title":"Opensearch"},{"url":"#vault","title":"Vault"},{"url":"#connector-data","title":"Connector data"},{"url":"#workflow-data","title":"Workflow data"},{"url":"#groovy-files","title":"Groovy files"}]},{"url":"#restoring-data","title":"Restoring Data","items":[{"items":[{"items":[{"url":"#mariadb-1","title":"MariaDB"},{"url":"#postgresql-1","title":"PostgreSQL"}]}]},{"url":"#opensearch-1","title":"Opensearch"},{"url":"#vault-1","title":"Vault"},{"url":"#connector-data-1","title":"Connector data"},{"url":"#workflow-data-1","title":"Workflow data"},{"url":"#groovy-files-1","title":"Groovy files"}]}]}}},{"node":{"fields":{"slug":"/installation/2-docker-installation/2-Configuration-options"},"tableOfContents":{"items":[{"url":"#environment-variables","title":"Environment Variables"}]}}},{"node":{"fields":{"slug":"/installation/2-docker-installation/6-externalDB"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/installation/6-kubernetes-installation/1-ssl"},"tableOfContents":{"items":[{"url":"#ssl-certificate-directory","title":"SSL Certificate Directory"},{"url":"#updating-the-openiam-certificate-in-aks","title":"Updating the OpenIAM certificate in AKS","items":[{"url":"#pre-requisites","title":"Pre-requisites"}]}]}}},{"node":{"fields":{"slug":"/installation/6-kubernetes-installation/10-backup-and-restoration"},"tableOfContents":{"items":[{"url":"#pre-backup-steps","title":"Pre-backup steps"},{"url":"#restoration","title":"Restoration"},{"url":"#post-restoration","title":"Post restoration"}]}}},{"node":{"fields":{"slug":"/installation/6-kubernetes-installation/11-common-scenario"},"tableOfContents":{"items":[{"url":"#setting-up-docker-environment-variables","title":"Setting up Docker environment variables"},{"url":"#installing-helm","title":"Installing Helm"},{"url":"#installing-terraform","title":"Installing Terraform"},{"url":"#system-requirements","title":"System requirements","items":[{"url":"#minimum-hardware-requirements","title":"MINIMUM Hardware requirements"}]},{"url":"#kubernetes-version","title":"Kubernetes Version"},{"url":"#prerequisites","title":"Prerequisites","items":[{"url":"#vault","title":"Vault","items":[{"url":"#smtp-server","title":"SMTP Server"},{"url":"#rabbitmq-tls","title":"RabbitMQ TLS","items":[{"url":"#adding-your-own-tls-certificates-to-rabbitmq","title":"Adding your own TLS Certificates to RabbitMQ"},{"url":"#generating-a-self-signed-certificate","title":"Generating a self-signed certificate"}]},{"url":"#https-certificates","title":"HTTPS certificates"},{"url":"#set-required-values-in-envsh","title":"Set required values in env.sh"},{"url":"#device-manager-optional","title":"Device manager (optional)"},{"url":"#vmmax_map_count","title":"vm.max_map_count"}]},{"url":"#initialize-and-setup","title":"Initialize and setup"},{"url":"#rabbitmq","title":"RabbitMQ"},{"url":"#deploying-with-terraform","title":"Deploying with Terraform"},{"url":"#deploying-without-terraform","title":"Deploying without Terraform"},{"url":"#confirming-successful-deployment","title":"Confirming successful deployment","items":[{"url":"#debugging-failed-pods","title":"Debugging failed pods"}]},{"url":"#accessing-your-deployed-instance","title":"Accessing your deployed instance","items":[{"url":"#switching-between-environmentsclients","title":"Switching between environments/clients."}]}]}]}}},{"node":{"fields":{"slug":"/installation/6-kubernetes-installation/12-vault-migration-fromRPM-toK8"},"tableOfContents":{"items":[{"url":"#pre-migration-preparation-on-rpm-nodes","title":"Pre-Migration preparation on RPM nodes"},{"url":"#migrating-process","title":"Migrating process","items":[{"url":"#installing-medusa-utility-on-rpm-node","title":"Installing Medusa utility on RPM node"},{"url":"#exporting-vault-data-from-rpm-cluster","title":"Exporting Vault data from RPM cluster"},{"url":"#exporting-java-truststore-cacerts-from-rpm-node","title":"Exporting Java Truststore (cacerts) from RPM node"},{"url":"#installing-medusa-utility-on-kubernetes-deployer-node","title":"Installing Medusa utility on Kubernetes deployer node"},{"url":"#performing-terraform-cleanup-on-kubernetes-deployer-node","title":"Performing Terraform Cleanup on Kubernetes deployer node"},{"url":"#updating-terraform-configuration","title":"Updating Terraform configuration"},{"url":"#building-a-custom-esb-image-with-updated-cacerts","title":"Building a custom ESB image with updated cacerts"},{"url":"#loading-esb-image-into-kubernetes-nodes","title":"Loading ESB image into Kubernetes nodes"},{"url":"#updating-image-in-esb-statefulset","title":"Updating image in ESB StatefulSet"},{"url":"#deploying-openiam-on-kubernetes","title":"Deploying OpenIAM on Kubernetes"},{"url":"#importing-vault-data-into-kubernetes-vault","title":"Importing Vault Data into Kubernetes Vault"}]},{"url":"#post-migration-validation","title":"Post-Migration Validation"}]}}},{"node":{"fields":{"slug":"/installation/6-kubernetes-installation/2-deployment-with-terraform"},"tableOfContents":{"items":[{"url":"#prerequisites","title":"Prerequisites"},{"url":"#setting-common-variables-in-terraformtfvars","title":"Setting common variables in terraform.tfvars"},{"url":"#setting-the-cloud-provider","title":"Setting the Cloud Provider"},{"url":"#set-variables-specific-to-your-cloud-provider","title":"Set variables specific to your cloud provider"},{"url":"#deploying","title":"Deploying"},{"url":"#destroying","title":"Destroying"},{"url":"#managing-state","title":"Managing state"},{"url":"#migration-guide","title":"Migration guide","items":[{"url":"#versions-pre-421-to-421","title":"Versions pre-4.2.1 to 4.2.1"}]}]}}},{"node":{"fields":{"slug":"/installation/6-kubernetes-installation/3-depl-without-terraform"},"tableOfContents":{"items":[{"url":"#prerequisites","title":"Prerequisites","items":[{"url":"#installer-vm-preparation","title":"Installer VM preparation"}]},{"url":"#installing-required-utilities","title":"Installing required utilities","items":[{"url":"#installing-docker","title":"Installing Docker"},{"url":"#installing-helm","title":"Installing Helm"},{"url":"#installing-kubectl","title":"Installing kubectl"}]},{"url":"#preparing-openiam-deployment-directory","title":"Preparing OpenIAM deployment directory","items":[{"url":"#deployment-options","title":"Deployment options"},{"url":"#pre-deployment-checklist","title":"Pre-deployment checklist"}]},{"url":"#installing-openiam-using-local-mariadb","title":"Installing OpenIAM using local MariaDB"},{"url":"#installing-openiam-using-remote-mysql-database","title":"Installing OpenIAM using remote MySQL database"},{"url":"#installing-openiam-using-remote-postgresql","title":"Installing OpenIAM using remote PostgreSQL"},{"url":"#post-install-verification","title":"Post-install verification"},{"url":"#troubleshooting","title":"Troubleshooting"}]}}},{"node":{"fields":{"slug":"/installation/6-kubernetes-installation/4-RabbitMQ-TLS"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/installation/6-kubernetes-installation/5-upgrading"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/installation/6-kubernetes-installation/7-useal-keys-restoration"},"tableOfContents":{"items":[{"url":"#backing-up-the-unseal-keys","title":"Backing up the unseal keys"},{"url":"#restoring-the-unseal-keys","title":"Restoring the unseal keys"}]}}},{"node":{"fields":{"slug":"/installation/6-kubernetes-installation/6-k8platforms"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/installation/6-kubernetes-installation/9-remoteDB"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/installation/7-OpenShift-installation/1-create-cluster"},"tableOfContents":{"items":[{"url":"#installing-the-azure-cli-on-linux","title":"Installing the Azure CLI on Linux"},{"url":"#creating-an-azure-red-hat-openshift-4-cluster","title":"Creating an Azure Red Hat OpenShift 4 cluster","items":[{"items":[{"items":[{"url":"#example-steps-from-microsoft-documents-example-uses-ubuntu-2004","title":"Example steps from Microsoft documents (Example uses Ubuntu 20.04):"}]},{"url":"#pre-requisites","title":"Pre-requisites"},{"url":"#verifying-permissions","title":"Verifying permissions"},{"url":"#registering-the-resource-providers","title":"Registering the resource providers"},{"url":"#getting-a-red-hat-pull-secret","title":"Getting a Red Hat pull secret"},{"url":"#preparing-a-custom-domain-for-your-cluster","title":"Preparing a custom domain for your cluster"},{"url":"#creating-a-virtual-network-containing-two-empty-subnets","title":"Creating a virtual network containing two empty subnets"},{"url":"#creating-the-cluster","title":"Creating the cluster"}]}]}]}}},{"node":{"fields":{"slug":"/installation/6-kubernetes-installation/8-AKS_with_ext_MSSQL"},"tableOfContents":{"items":[{"url":"#pre-requisite-planning-for-the-deployment","title":"Pre-requisite planning for the deployment"},{"url":"#installing-openiam","title":"Installing OpenIAM"},{"url":"#replicating-the-openiam-container-registry-to-the-registry-at-mpg","title":"Replicating the OpenIAM container registry to the registry at MPG"}]}}},{"node":{"fields":{"slug":"/installation/7-OpenShift-installation/2-connect-to-cluster"},"tableOfContents":{"items":[{"items":[{"url":"#connect-to-the-cluster","title":"Connect to the cluster"}]},{"url":"#install-the-openshift-cli","title":"Install the OpenShift CLI"},{"url":"#connect-using-the-openshift-cli","title":"Connect using the OpenShift CLI"}]}}},{"node":{"fields":{"slug":"/installation/7-OpenShift-installation/4-some-descriptions-helm"},"tableOfContents":{"items":[{"url":"#infrastructure-components","title":"Infrastructure components"},{"url":"#memory-on-a-per-app-basis","title":"Memory on a per-app basis"}]}}},{"node":{"fields":{"slug":"/installation/7-OpenShift-installation/5-localhost-dev-cluster"},"tableOfContents":{"items":[{"url":"#creating-a-crc-codeready-containers-cluster","title":"Creating a CRC (CodeReady Containers cluster)"},{"url":"#starting-openshift-cluster","title":"Starting OpenShift cluster","items":[{"url":"#possible-issues","title":"Possible issues"}]}]}}},{"node":{"fields":{"slug":"/installation/7-OpenShift-installation/6-deploy-from-windows"},"tableOfContents":{"items":[{"url":"#deploy-to-openshift-with-helm","title":"Deploy to OpenShift with Helm"}]}}},{"node":{"fields":{"slug":"/installation/8-sizing/2-medium-k8"},"tableOfContents":{"items":[{"url":"#aws-sizing","title":"AWS Sizing"},{"url":"#azure-sizing","title":"Azure Sizing"},{"url":"#openiam-pod-memory-sizing","title":"OpenIAM Pod Memory Sizing"}]}}},{"node":{"fields":{"slug":"/installation/8-sizing/1-small-k8"},"tableOfContents":{"items":[{"url":"#aws-sizing","title":"AWS Sizing"},{"url":"#azure-sizing","title":"Azure Sizing"},{"url":"#openiam-pod-memory-sizing","title":"OpenIAM Pod Memory Sizing"}]}}},{"node":{"fields":{"slug":"/installation/9-data_migration/1-migrating_ES_Docker"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/installation/9-miscellaneous/01-log4j"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/installation/9-miscellaneous/02-hardening"},"tableOfContents":{"items":[{"url":"#secure-end-user-access-to-the-openiam-ui","title":"Secure End user access to the OpenIAM UI","items":[{"items":[{"url":"#enable-https-communication-to-the-openiam-ui","title":"Enable HTTPS communication to the OpenIAM UI"},{"url":"#secure-responses-from-cross-site-scripting","title":"Secure responses from cross-site scripting"},{"url":"#update-the-password-policy","title":"Update the password policy"},{"url":"#update-the-authentication-policy","title":"Update the authentication policy"}]}]},{"url":"#secure-the-infrastructure","title":"Secure the infrastructure","items":[{"items":[{"url":"#update-default-stack-component-passwords","title":"Update default stack component passwords"},{"url":"#tls-communication-with-rabbitmq","title":"TLS communication with RabbitMQ"},{"url":"#reduce-log-levels","title":"Reduce log levels"}]}]},{"url":"#remove-default-objects","title":"Remove Default objects","items":[{"items":[{"url":"#remove-default-users","title":"Remove default users"},{"url":"#replace-system-admin-accounts","title":"Replace system admin accounts"},{"url":"#remove-default-entitlement-objects","title":"Remove default entitlement objects","items":[{"url":"#remove-roles","title":"Remove roles"},{"url":"#remove-default-groups","title":"Remove default groups"},{"url":"#remove-all-organization-objects","title":"Remove all organization objects"}]}]}]},{"url":"#other-recommendations","title":"Other recommendations","items":[{"items":[{"url":"#restrict-access-to-servers-hosting-openiam","title":"Restrict Access to servers hosting OpenIAM"},{"url":"#stay-current-with-patching","title":"Stay current with patching"}]}]}]}}},{"node":{"fields":{"slug":"/installation/9-miscellaneous/03-db-switch"},"tableOfContents":{"items":[{"url":"#switch-existing-installation-using-another-database","title":"Switch existing installation using another database","items":[{"url":"#rpm-type-of-installation","title":"RPM type of installation"}]}]}}},{"node":{"fields":{"slug":"/installation/9-miscellaneous/04-compatibility"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/installation/9-miscellaneous/05-postgres-install"},"tableOfContents":{"items":[{"url":"#internet-based-installation","title":"Internet-based installation"},{"url":"#non-internet-based-installation","title":"Non-internet-based installation"},{"url":"#connecting-to-locally-installed-postgresql","title":"Connecting to locally installed PostgreSQL"}]}}},{"node":{"fields":{"slug":"/installation/99-miscellaneous/04-compatibility"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/developerguide/8-api/access-certification"},"tableOfContents":{"items":[{"url":"#rest-api-documentation","title":"Rest API Documentation","items":[{"url":"#endpoints-draft","title":"Endpoints (DRAFT)","items":[{"url":"#get-restapiaccess-certifications","title":"GET /rest/api/access-certifications"},{"url":"#post-restapiaccess-certifications","title":"POST /rest/api/access-certifications"},{"url":"#get-restapiaccess-certificationsall-entitlements-by-app","title":"GET /rest/api/access-certifications/all-entitlements-by-app"},{"url":"#get-restapiaccess-certificationsget-md-types","title":"GET /rest/api/access-certifications/get-md-types"},{"url":"#post-restapiaccess-certificationspreview-entitlements-by-application","title":"POST /rest/api/access-certifications/preview-entitlements-by-application"},{"url":"#post-restapiaccess-certificationspreview-groups-by-application","title":"POST /rest/api/access-certifications/preview-groups-by-application"},{"url":"#post-restapiaccess-certificationspreview-roles-by-application","title":"POST /rest/api/access-certifications/preview-roles-by-application"},{"url":"#post-restapiaccess-certificationspreview-users-by-application","title":"POST /rest/api/access-certifications/preview-users-by-application"},{"url":"#get-restapiaccess-certificationstarget-users","title":"GET /rest/api/access-certifications/target-users"},{"url":"#post-restapiaccess-certificationsupload","title":"POST /rest/api/access-certifications/upload"},{"url":"#get-restapiaccess-certificationsaccess-certification-id","title":"GET /rest/api/access-certifications/(access-certification-id)"},{"url":"#post-restapiaccess-certificationsaccess-certification-id","title":"POST /rest/api/access-certifications/(access-certification-id)"},{"url":"#get-restapiaccess-certificationsaccess-certification-idstats","title":"GET /rest/api/access-certifications/(access-certification-id)/stats"},{"url":"#get-restapiaccess-certificationsaccess-certification-idstatscampaign-id","title":"GET /rest/api/access-certifications/(access-certification-id)/stats/(campaign-id)"},{"url":"#delete-restapiaccess-certificationsid","title":"DELETE /rest/api/access-certifications/(id)"}]}]}]}}},{"node":{"fields":{"slug":"/troubleshooting/cluster/1-rabbitmq-reinit"},"tableOfContents":{"items":[{"url":"#issue-overview","title":"Issue overview"},{"url":"#solution","title":"Solution"}]}}},{"node":{"fields":{"slug":"/troubleshooting/cluster/3-Rabbitmq-connection-timeout"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/troubleshooting/cluster/2-rabbitmq-UI"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/troubleshooting/connectors/sync-vs-async-source"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/installation/7-OpenShift-installation/3-deploy-OpenIAM-helm"},"tableOfContents":{"items":[{"url":"#deploying-to-openshift-with-helm","title":"Deploying to OpenShift with Helm"}]}}},{"node":{"fields":{"slug":"/troubleshooting/docker/1-connectorlogs"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/troubleshooting/docker/2-containersrestart"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/troubleshooting/docker/3-uninstall"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/troubleshooting/docker/4-troubleshooting-steps"},"tableOfContents":{"items":[{"url":"#troubleshooting-steps","title":"Troubleshooting steps"},{"url":"#using-the-tail-command-to-capture-relevant-logs","title":"Using the tail command to capture relevant logs","items":[{"url":"#docker-application","title":"Docker application"}]}]}}},{"node":{"fields":{"slug":"/troubleshooting/environment/memoryutili"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/troubleshooting/environment/redismemory"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/troubleshooting/environment/disableswap"},"tableOfContents":{"items":[{"url":"#check-the-swap-status","title":"Check the swap status"},{"url":"#disable-swap","title":"Disable swap"}]}}},{"node":{"fields":{"slug":"/troubleshooting/operational/JDBC-connection-pool"},"tableOfContents":{"items":[{"url":"#problem","title":"Problem"},{"url":"#solution","title":"Solution","items":[{"url":"#rpm-environment","title":"RPM environment"},{"url":"#docker-environment","title":"Docker environment"},{"url":"#kubernetes-environment","title":"Kubernetes environment"}]}]}}},{"node":{"fields":{"slug":"/troubleshooting/docker/5-log-checking-guide"},"tableOfContents":{"items":[{"url":"#useful-docker-commands","title":"Useful Docker commands"},{"url":"#example","title":"Example","items":[{"url":"#checking-a-specific-log-flow","title":"Checking a specific log flow"},{"url":"#useful-tips","title":"Useful tips"}]}]}}},{"node":{"fields":{"slug":"/troubleshooting/operational/access-after-migration"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/troubleshooting/operational/access-forbidden"},"tableOfContents":{"items":[{"url":"#solution","title":"Solution"}]}}},{"node":{"fields":{"slug":"/troubleshooting/operational/activationlink"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/troubleshooting/operational/audit-doc-timestamp"},"tableOfContents":{"items":[{"url":"#prerequisite","title":"Prerequisite"},{"url":"#fixing-the-issue","title":"Fixing the issue","items":[{"url":"#the-contents-of-python-script","title":"The contents of Python script"}]}]}}},{"node":{"fields":{"slug":"/troubleshooting/operational/auth-manager"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/troubleshooting/operational/database-reset"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/troubleshooting/operational/debug-logs-CassandraJanusGraph"},"tableOfContents":{"items":[{"url":"#cassandra","title":"Cassandra","items":[{"url":"#enabling-debug-logs","title":"Enabling DEBUG logs"},{"url":"#disabling-debug-logs","title":"Disabling DEBUG logs"}]},{"url":"#janusgraph","title":"JanusGraph","items":[{"url":"#enabling-debug-logs-1","title":"Enabling DEBUG logs"},{"url":"#disabling-debug-logs-1","title":"Disabling DEBUG Logs"}]}]}}},{"node":{"fields":{"slug":"/troubleshooting/operational/elasticsearch-readonly-state"},"tableOfContents":{"items":[{"url":"#overview","title":"Overview"},{"url":"#recommended-actions","title":"Recommended actions","items":[{"url":"#additional-notes","title":"Additional notes","items":[{"url":"#docker","title":"Docker"},{"url":"#kubernetes","title":"Kubernetes"}]}]}]}}},{"node":{"fields":{"slug":"/troubleshooting/operational/flyway_version"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/troubleshooting/operational/increasing-RAM"},"tableOfContents":{"items":[{"url":"#rpm","title":"RPM"},{"url":"#docker-swarm","title":"Docker Swarm","items":[{"url":"#pre-change-status","title":"Pre-Change Status"}]}]}}},{"node":{"fields":{"slug":"/troubleshooting/operational/lackof_disk_space"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/troubleshooting/operational/modifly_system_labels_and_messages"},"tableOfContents":{"items":[{"url":"#common","title":"Common"},{"url":"#rpm-installation","title":"RPM installation"},{"url":"#docker-installation","title":"Docker installation"},{"url":"#k8-installation","title":"k8 installation"},{"url":"#other-languages-localization","title":"Other languages localization"},{"url":"#menu-names","title":"Menu names"}]}}},{"node":{"fields":{"slug":"/troubleshooting/operational/my-application-page-selfservice"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/troubleshooting/operational/overriding-app-properties"},"tableOfContents":{"items":[{"url":"#overriding-property-for-docker-based-installation","title":"Overriding property for Docker based installation"},{"url":"#overriding-property-for-rpm-based-installation","title":"Overriding property for RPM based installation"},{"url":"#overriding-property-for-kubernetes-deployment","title":"Overriding property for Kubernetes deployment"},{"url":"#result","title":"Result"}]}}},{"node":{"fields":{"slug":"/troubleshooting/operational/pad-block-corrupted"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/troubleshooting/operational/remove-navigation-bar"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/troubleshooting/operational/report-generation-issue"},"tableOfContents":{"items":[{"url":"#report-is-not-getting-generatedsent-over-email","title":"Report is not getting generated/sent over email."}]}}},{"node":{"fields":{"slug":"/troubleshooting/operational/resetting_passwords"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/troubleshooting/operational/run_flyway_repair_mode"},"tableOfContents":{"items":[{"url":"#flyway-migration-error","title":"Flyway migration error"}]}}},{"node":{"fields":{"slug":"/troubleshooting/operational/unlocksysadmin"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/troubleshooting/operational/username_in_selfservice"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/troubleshooting/rpm/failed-dependencies"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/troubleshooting/rpm/trobleshooting_guide"},"tableOfContents":{"items":[{"url":"#collecting-openiam-installation-logs","title":"Collecting OpenIAM installation logs"},{"url":"#collecting-logs-for-individual-failed-services","title":"Collecting logs for individual failed services"},{"url":"#collecting-openiam-ui-logs","title":"Collecting OpenIAM UI logs"},{"url":"#openiam-cli-commands-for-individual-service-logs","title":"OpenIAM CLI commands for individual service logs"},{"url":"#checking-journalctl-logs-for-individual-services","title":"Checking Journalctl logs for individual services"},{"url":"#writing-and-sharing-live-log-files","title":"Writing and Sharing Live-Log Files"},{"url":"#which-file-shell-i-send-to-openiam-support","title":"Which file shell I send to OpenIAM support?"},{"url":"#using-the-tail-command-to-capture-relevant-logs","title":"Using the tail command to capture relevant logs","items":[{"url":"#rpm-application","title":"RPM application"},{"url":"#use-case","title":"Use case"}]}]}}},{"node":{"fields":{"slug":"/admin/1-usradmin/4-pageconfiguration/1-userpage"},"tableOfContents":{"items":[{"url":"#custom-validation-script","title":"Custom Validation Script"}]}}},{"node":{"fields":{"slug":"/admin/1-usradmin/4-pageconfiguration/2-customuserpage"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/1-usradmin/4-pageconfiguration/4-customtemplates"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/12-administration/1-sysconfig/1-system"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/12-administration/1-sysconfig/2-regex-validation"},"tableOfContents":{"items":[{"url":"#fields","title":"Fields","items":[{"url":"#email-regular-expression","title":"Email Regular Expression"},{"url":"#login-regular-expression","title":"Login regular expression"},{"url":"#first-name-regular-expression","title":"First name regular expression"},{"url":"#last-name-regular-expression","title":"Last name regular expression"}]},{"url":"#updating-the-regex-fields","title":"Updating the regex fields"},{"url":"#testing-regex-fields","title":"Testing regex fields","items":[{"url":"#online-tester","title":"Online tester"},{"url":"#groovy-one-liner","title":"Groovy one-liner"},{"url":"#quick-bash-test","title":"Quick bash test"}]},{"url":"#quick-reference","title":"Quick reference"}]}}},{"node":{"fields":{"slug":"/admin/12-administration/1-sysconfig/3-UI"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/12-administration/1-sysconfig/5-organization-tab"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/12-administration/1-sysconfig/9-health-checks"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/12-administration/1-sysconfig/4-workflow"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/12-administration/1-sysconfig/7-authentication"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/12-administration/1-sysconfig/8-auditeventstosyslog"},"tableOfContents":{"items":[{"url":"#settings-for-centos-syslog","title":"Settings for CentOS' syslog:","items":[{"items":[{"url":"#provides-udp-syslog-reception","title":"Provides UDP syslog reception"},{"url":"#provides-tcp-syslog-reception","title":"Provides TCP syslog reception"}]}]},{"url":"#syslog-in-docker","title":"Syslog in Docker"},{"url":"#install-rsyslog-on-ubuntu","title":"Install rsyslog on Ubuntu","items":[{"items":[{"url":"#provides-udp-syslog-reception-1","title":"Provides UDP syslog reception"},{"url":"#provides-tcp-syslog-reception-1","title":"Provides TCP syslog reception"}]},{"url":"#configuration-syslog-export-on-k8-installation","title":"Configuration syslog export on K8 installation.","items":[{"url":"#example-for-creating-a-service-for-ubuntu-on-k8","title":"Example for creating a service for Ubuntu on K8."}]}]}]}}},{"node":{"fields":{"slug":"/admin/12-administration/2-mail-management/1-emailtemplates"},"tableOfContents":{"items":[{"url":"#existing-email-templates-review","title":"Existing Email Templates Review"},{"url":"#customizing-email-templates","title":"Customizing Email Templates"}]}}},{"node":{"fields":{"slug":"/admin/12-administration/1-sysconfig/6-password"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/12-administration/2-mail-management/2-smtpconfig"},"tableOfContents":{"items":[{"url":"#configure-a-smtp-and-imap-relay-mailbox-configuration","title":"Configure a SMTP and IMAP Relay (Mailbox Configuration)","items":[{"items":[{"url":"#mailbox-configurations","title":"Mailbox Configurations"},{"url":"#mailbox-configuration-templates","title":"Mailbox Configuration Templates"},{"url":"#create-mailbox-configuration-template","title":"Create Mailbox Configuration Template"},{"url":"#create-mailbox-configuration","title":"Create Mailbox Configuration","items":[{"url":"#customize-mimemessage-messages","title":"Customize MimeMessage messages"},{"url":"#understanding-mailbox-configuration-rotation","title":"Understanding Mailbox-configuration rotation"}]}]}]}]}}},{"node":{"fields":{"slug":"/admin/12-administration/2-mail-management/3-multilanguagemail"},"tableOfContents":{"items":[{"url":"#adding-the-custom-language-script-to-a-mail-template","title":"Adding the custom language script to a mail template"},{"url":"#adding-a-new-language-to-the-script","title":"Adding a new language to the script"},{"url":"#example","title":"Example","items":[{"url":"#adding-french-fr-and-spanish-es","title":"Adding French (fr) and Spanish (es)"}]}]}}},{"node":{"fields":{"slug":"/admin/12-administration/2-mail-management/4-mail-via-azure"},"tableOfContents":{"items":[{"url":"#microsoft-azure-portal-configuration","title":"Microsoft Azure portal configuration","items":[{"url":"#create-a-client-secret","title":"Create a Client Secret"},{"url":"#assigning-api-permissions","title":"Assigning API permissions"},{"url":"#alternative-method-creating-a-shared-mailbox-from-microsoft-365-admin-center","title":"Alternative method: Creating a shared mailbox from Microsoft 365 Admin Center"}]},{"url":"#installing-exchange-online-in-windows","title":"Installing Exchange Online in Windows"},{"url":"#mailbox-configuration-on-openiam-webconsole","title":"Mailbox configuration on OpenIAM webconsole"}]}}},{"node":{"fields":{"slug":"/admin/12-administration/2-mail-management/5-alert-notifications"},"tableOfContents":{"items":[{"items":[{"url":"#pre-requisites","title":"Pre-requisites"}]},{"url":"#configuring-an-smtp-relay","title":"Configuring an SMTP relay"},{"url":"#creating-or-selecting-the-notification-group","title":"Creating or selecting the notification group"},{"url":"#assigning-a-group-to-connector-status-notifications","title":"Assigning a group to connector status notifications"},{"url":"#receiving-automated-alerts","title":"Receiving automated alerts"}]}}},{"node":{"fields":{"slug":"/admin/12-administration/2-mail-management/6-email-template-variables"},"tableOfContents":{"items":[{"url":"#available-templates-and-their-variables","title":"Available templates and their variables","items":[{"url":"#password-and-account","title":"Password and account","items":[{"url":"#otp_code","title":"OTP_CODE"},{"url":"#account_locked","title":"ACCOUNT_LOCKED"},{"url":"#password_has_been_compromised","title":"PASSWORD_HAS_BEEN_COMPROMISED"}]},{"url":"#new-user-and-activation","title":"New User and activation","items":[{"url":"#new_user_activation_notification","title":"NEW_USER_ACTIVATION_NOTIFICATION"}]},{"url":"#workflow-and-approvals","title":"Workflow and approvals"},{"url":"#access-certification","title":"Access certification","items":[{"url":"#access_cert_reminder","title":"ACCESS_CERT_REMINDER"},{"url":"#escalate_task_access_cert_task","title":"ESCALATE_TASK_ACCESS_CERT_TASK"},{"url":"#certification_complete_report","title":"CERTIFICATION_COMPLETE_REPORT"}]},{"url":"#access-lifecycle","title":"Access lifecycle","items":[{"url":"#access_is_almost_expired","title":"ACCESS_IS_ALMOST_EXPIRED"},{"url":"#request_comment_added","title":"REQUEST_COMMENT_ADDED"},{"url":"#duplicate_self_registration_attempt","title":"DUPLICATE_SELF_REGISTRATION_ATTEMPT"},{"url":"#user_terminate_notify_supervisor","title":"USER_TERMINATE_NOTIFY_SUPERVISOR"}]}]}]}}},{"node":{"fields":{"slug":"/admin/2-authentication/8-social/1-googlesociallogin"},"tableOfContents":{"items":[{"url":"#creating-a-google-project","title":"Creating a Google project"},{"url":"#configuring-openiam","title":"Configuring OpenIAM","items":[{"url":"#creating-an-authentication-provider","title":"Creating an Authentication Provider"},{"url":"#preparing-users","title":"Preparing users"}]},{"url":"#self-registration","title":"Self-Registration","items":[{"url":"#configuring-google-console","title":"Configuring Google Console"},{"url":"#configuring-openiam-1","title":"Configuring OpenIAM"}]},{"url":"#testing-the-feature","title":"Testing the feature"}]}}},{"node":{"fields":{"slug":"/admin/2-authentication/8-social/2-facebooksociallogin"},"tableOfContents":{"items":[{"url":"#creating-and-configuring-a-facebook-application","title":"Creating and Configuring a Facebook Application"},{"url":"#configuring-openiam","title":"Configuring OpenIAM","items":[{"url":"#creating-an-authentication-provider","title":"Creating an Authentication Provider"},{"url":"#preparing-users","title":"Preparing Users"}]},{"url":"#testing-the-feature","title":"Testing the Feature"}]}}},{"node":{"fields":{"slug":"/admin/2-authentication/8-social/3-linkedinsociallogin"},"tableOfContents":{"items":[{"url":"#creating-a-linkedin-project","title":"Creating a LinkedIn project"},{"url":"#configuring-openiam","title":"Configuring OpenIAM","items":[{"url":"#creating-an-authentication-provider","title":"Creating an Authentication Provider"},{"url":"#preparing-users","title":"Preparing users"}]},{"url":"#self-registration","title":"Self-Registration","items":[{"url":"#configuring-openiam-1","title":"Configuring OpenIAM"},{"url":"#testing-the-feature","title":"Testing the feature"}]}]}}},{"node":{"fields":{"slug":"/admin/2-authentication/8-social/4-appleidsociallogin"},"tableOfContents":{"items":[{"url":"#configuring-authentication-using-appleid","title":"Configuring authentication using AppleID","items":[{"url":"#creating-an-identifier","title":"Creating an Identifier"},{"url":"#creating-a-services-id","title":"Creating a Services ID"},{"url":"#creating-a-private-key-for-client-authentication","title":"Creating a Private Key for Client Authentication"}]},{"url":"#configuring-openiam","title":"Configuring OpenIAM"},{"url":"#testing-the-feature","title":"Testing the Feature"}]}}},{"node":{"fields":{"slug":"/admin/3-authz/14-menus/1-enduseraccess"},"tableOfContents":{"items":[{"url":"#assigning-menus-to-a-role","title":"Assigning menus to a role","items":[{"url":"#update-the-is-public-flag","title":"Update the Is Public flag"},{"url":"#associate-menus-to-roles","title":"Associate menus to roles"},{"url":"#assigning-my-approvals-menu-to-a-role","title":"Assigning My Approvals menu to a role"}]}]}}},{"node":{"fields":{"slug":"/admin/3-authz/14-menus/2-adminaccess"},"tableOfContents":{"items":[{"url":"#assigning-menus-to-a-role","title":"Assigning menus to a role"},{"url":"#define-access-roles","title":"Define Access Roles"},{"url":"#special-steps-for-webconsole-menus-access","title":"Special steps for webconsole menus access"}]}}},{"node":{"fields":{"slug":"/admin/3-authz/14-menus/3-FAQ"},"tableOfContents":{"items":[{"url":"#hiding-the-save-button-for-users-in-selfservice","title":"Hiding the Save button for users in SelfService"}]}}},{"node":{"fields":{"slug":"/admin/3-authz/14-menus/4-Config-Lhand-menu-SS-MyInfo"},"tableOfContents":{"items":[{"url":"#menu-tree-structure","title":"Menu tree structure"},{"url":"#editing-a-menu-item","title":"Editing a menu item"},{"url":"#actions-with-menu-items","title":"Actions with menu items","items":[{"url":"#ordering-menu-items","title":"Ordering menu items"},{"url":"#adding-a-new-menu-item","title":"Adding a new menu item"},{"url":"#removing-a-menu-item","title":"Removing a menu item"}]},{"url":"#entitlements","title":"Entitlements"},{"url":"#saving-changes","title":"Saving changes"},{"url":"#end-user-result","title":"End-user result","items":[{"url":"#common-tasks","title":"Common tasks"}]}]}}},{"node":{"fields":{"slug":"/admin/3-authz/2-roles/2-createrole"},"tableOfContents":{"items":[{"url":"#creating-a-new-role","title":"Creating a new role"},{"url":"#updating-an-existing-role","title":"Updating an existing role"},{"url":"#addingdeleting-users-from-a-role","title":"Adding/deleting users from a role"},{"url":"#adding-resources-to-a-role","title":"Adding resources to a role"},{"url":"#example","title":"Example"}]}}},{"node":{"fields":{"slug":"/admin/3-authz/2-roles/1-role-types"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/3-authz/2-roles/3-findrole"},"tableOfContents":{"items":[{"url":"#header-search","title":"Header search"},{"url":"#role-manager-search","title":"Role manager search"}]}}},{"node":{"fields":{"slug":"/admin/3-authz/2-roles/5-importingroles"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/5-lifecycle/11-provisioning-config/1-prepost-processor"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/8-sso/1-saml/1-jit-provisioning"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/3-authz/3-groups/1-create-group"},"tableOfContents":{"items":[{"url":"#create-a-new-group","title":"Create a new group"}]}}},{"node":{"fields":{"slug":"/admin/4-app-onboarding/2-Manual-applications/1-reg-applications"},"tableOfContents":{"items":[{"url":"#registering-an-application-from-the-ui","title":"Registering an application from the UI","items":[{"url":"#defining-an-application-owner","title":"Defining an application owner"},{"url":"#defining-an-application-approval-flow","title":"Defining an application approval flow"}]}]}}},{"node":{"fields":{"slug":"/developerguide/2-api/1-postman/2-postmanconfig"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/admin/8-sso/2-oauth2/1-Auth-code-grand"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/developerguide/2-api/1-postman/3-add-request"},"tableOfContents":{"items":[{"url":"#testing-your-request","title":"Testing your request"}]}}},{"node":{"fields":{"slug":"/connectorconfig/microsoft/10-winlocal/2-winlocalv5"},"tableOfContents":{"items":[{"items":[{"url":"#operational-requirements","title":"Operational requirements"}]},{"url":"#provisioning-identities","title":"Provisioning identities"},{"url":"#provisioning-user","title":"Provisioning User","items":[{"items":[{"url":"#add","title":"ADD"},{"url":"#modify","title":"MODIFY"},{"url":"#reset-password","title":"RESET PASSWORD"}]}]},{"url":"#provisioning-group","title":"Provisioning Group","items":[{"items":[{"url":"#add-1","title":"ADD"},{"url":"#modify-1","title":"MODIFY"}]}]},{"url":"#search","title":"Search"}]}}},{"node":{"fields":{"slug":"/connectorconfig/microsoft/10-winlocal/1-winlocalv4"},"tableOfContents":{"items":[{"items":[{"url":"#operational-requirements","title":"Operational requirements"}]},{"url":"#provisioning-identities","title":"Provisioning identities"},{"url":"#provisioning-users","title":"Provisioning users"},{"url":"#synchronization","title":"Synchronization","items":[{"items":[{"url":"#users-synchronization","title":"Users synchronization"},{"url":"#groups-synchronization","title":"Groups synchronization"}]}]},{"url":"#troubleshooting","title":"Troubleshooting"}]}}},{"node":{"fields":{"slug":"/developerguide/2-api/1-postman/1-createauthprovider"},"tableOfContents":{"items":[{"url":"#create-authentication-provider","title":"Create Authentication Provider","items":[{"url":"#configure-oauth-client-provider","title":"Configure oAuth Client Provider"}]}]}}},{"node":{"fields":{"slug":"/developerguide/2-api/1-postman/4-JWT-tokens"},"tableOfContents":{"items":[{"url":"#importing-client-collection-in-postman","title":"Importing Client collection in Postman."},{"url":"#setting-username-and-password-in-getauthtoken-request","title":"Setting username and password in GetAuthToken Request"},{"url":"#set-the-collection-variables","title":"Set the collection variables"},{"url":"#disable-automatically-follow-redirect-is-postman","title":"Disable Automatically follow redirect is postman"},{"url":"#run-the-client-collection","title":"Run the Client Collection."},{"url":"#view-the-response-in-console","title":"View the response in console"}]}}},{"node":{"fields":{"slug":"/developerguide/2-api/1-postman/5-postman-links"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/developerguide/2-api/2-python/1-createauthprovider"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/developerguide/2-api/1-postman/6-example"},"tableOfContents":{"items":[{"url":"#create-an-authentication-provider","title":"Create an authentication provider"},{"url":"#create-uri-patterns-for-permitted-actions","title":"Create URI patterns for permitted actions"},{"url":"#configure-the-default-scope","title":"Configure the default scope"},{"url":"#link-uri-patterns-to-the-authentication-provider-resource","title":"Link URI patterns to the authentication provider resource"},{"url":"#postman-configuration-for-token-generation","title":"Postman configuration for token generation"},{"url":"#troubleshooting-unauthorized-errors","title":"Troubleshooting unauthorized errors","items":[{"url":"#resolution-steps","title":"Resolution steps"}]}]}}},{"node":{"fields":{"slug":"/developerguide/2-api/2-python/2-grantinguathz"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/developerguide/2-api/2-python/4-enabling-disabling-user"},"tableOfContents":{"items":[{"url":"#disabling-a-user","title":"Disabling a user"},{"url":"#enabling-a-user","title":"Enabling a user"}]}}},{"node":{"fields":{"slug":"/developerguide/2-api/2-python/3-api-call-examples"},"tableOfContents":{"items":[{"url":"#creating-a-user","title":"Creating a user"},{"url":"#searching-for-a-user","title":"Searching for a user"},{"url":"#other-api-calls-examples","title":"Other API calls examples","items":[{"url":"#delete-user","title":"Delete User"},{"url":"#create-role","title":"Create role"},{"url":"#delete-role","title":"Delete Role"}]}]}}},{"node":{"fields":{"slug":"/developerguide/2-api/2-python/5-object-oriented-impl-example"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/developerguide/2-api/2-python/6-OTP-verification"},"tableOfContents":{"items":[{"url":"#sending-an-email-verification-code","title":"Sending an email verification code"},{"url":"#checking-the-email-verification-code","title":"Checking the email verification code"},{"url":"#sending-an-sms-verification-code","title":"Sending an SMS verification code"},{"url":"#logging-out","title":"Logging out"}]}}},{"node":{"fields":{"slug":"/developerguide/2-api/3-java/3-creating-searching-users"},"tableOfContents":{"items":[{"url":"#creating-a-user","title":"Creating a user"},{"url":"#searching-a-user","title":"Searching a user"}]}}},{"node":{"fields":{"slug":"/developerguide/2-api/3-java/4-calls-examples"},"tableOfContents":{"items":[{"url":"#deleting-a-user","title":"Deleting a user"},{"url":"#creating-a-role","title":"Creating a role"},{"url":"#deleting-a-role","title":"Deleting a role"}]}}},{"node":{"fields":{"slug":"/developerguide/2-api/3-java/5-enabling-disabling-users"},"tableOfContents":{"items":[{"url":"#disabling-a-user","title":"Disabling a user"},{"url":"#enabling-a-user","title":"Enabling a user"}]}}},{"node":{"fields":{"slug":"/developerguide/9-synchronization/2-import/3-azuread"},"tableOfContents":{"items":[{"items":[{"url":"#import-groups","title":"Import Groups"},{"url":"#import-users","title":"Import users","items":[{"url":"#groovy-script","title":"Groovy script","items":[{"url":"#select-attributes-to-import","title":"Select attributes to import"},{"url":"#map-the-entra-id-attributes-to-openiam","title":"Map the Entra ID attributes to OpenIAM"}]}]}]},{"url":"#import-groups-1","title":"Import Groups","items":[{"url":"#groovy-script-1","title":"Groovy script"}]}]}}},{"node":{"fields":{"slug":"/developerguide/9-synchronization/1-autoprov/1-newhires"},"tableOfContents":{"items":[{"url":"#create-new-groovy-script","title":"Create new groovy script"},{"url":"#map-primary-fields","title":"Map primary fields","items":[{"url":"#update-script-with-populate-object","title":"Update script with populate object"}]},{"url":"#map-source-attributes","title":"Map source attributes"},{"url":"#add-custom-attributes","title":"Add custom attributes"},{"url":"#add-organization-information","title":"Add Organization information"},{"url":"#manage-dates","title":"Manage dates"},{"url":"#add-manager--supervisor","title":"Add manager / supervisor"},{"url":"#add-phone-numbers","title":"Add phone numbers"},{"url":"#add-groups","title":"Add Groups"},{"url":"#add-roles","title":"Add Roles"},{"url":"#sending-email-notifications","title":"Sending email notifications","items":[{"url":"#adhoc-notifications","title":"Adhoc notifications"}]}]}}},{"node":{"fields":{"slug":"/developerguide/9-synchronization/2-import/6-importroles"},"tableOfContents":{"items":[{"url":"#create-new-groovy-script","title":"Create new groovy script"},{"url":"#map-primary-fields","title":"Map primary fields"},{"url":"#add-custom-attribute","title":"Add custom attribute"}]}}},{"node":{"fields":{"slug":"/developerguide/2-api/3-java/1-createauthprovider"},"tableOfContents":{"items":[{"url":"#creating-authentication-provider","title":"Creating authentication provider"},{"url":"#configuring-oauth-client-provider","title":"Configuring oAuth client provider"}]}}},{"node":{"fields":{"slug":"/developerguide/2-api/3-java/2-grantauthz"},"tableOfContents":{"items":[{"url":"#troubleshooting","title":"Troubleshooting","items":[{"url":"#case-1-the-text-within-the-dependency-is-red","title":"Case 1. The text within the dependency is red"}]}]}}},{"node":{"fields":{"slug":"/getting-started/4-application-onboarding/1-connect/2-rpm"},"tableOfContents":{"items":[{"url":"#deploying-the-remote-connector","title":"Deploying the remote connector"},{"url":"#registering-the-connector","title":"Registering the connector","items":[{"url":"#adding-the-queue-name-to-the-connector-configuration","title":"Adding the queue name to the connector configuration"}]}]}}},{"node":{"fields":{"slug":"/getting-started/4-application-onboarding/1-connect/3-docker"},"tableOfContents":{"items":[{"url":"#deploying-a-connector","title":"Deploying a connector"},{"url":"#starting-the-connector","title":"Starting the connector","items":[{"url":"#important-disclaimer","title":"Important disclaimer"}]},{"url":"#registering-the-connector","title":"Registering the connector"},{"url":"#deploying-remote-connectors","title":"Deploying remote connectors","items":[{"url":"#options","title":"Options","items":[{"url":"#adding-the-queue-name-to-the-connector-configuration","title":"Adding the queue name to the connector configuration"},{"url":"#deploying-a-connector-without-restarting-the-application","title":"Deploying a connector without restarting the application"}]}]}]}}},{"node":{"fields":{"slug":"/getting-started/4-application-onboarding/2-importentitlements/1-configuring-synch"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/getting-started/4-application-onboarding/1-connect/4-k8"},"tableOfContents":{"items":[{"url":"#deploying-a-connector","title":"Deploying a connector"},{"url":"#registering-the-connector","title":"Registering the connector"}]}}},{"node":{"fields":{"slug":"/getting-started/4-application-onboarding/2-importentitlements/2-transformationscripts"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/getting-started/4-application-onboarding/2-importentitlements/3-troubleshooting"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/getting-started/6-automatedprovisioning/2-tutorial/2-policymap"},"tableOfContents":{"items":[{"url":"#configuring-a-policy-map-from-scratch","title":"Configuring a policy map from scratch"},{"url":"#cloning-a-policy-map","title":"Cloning a policy map"},{"url":"#creating-a-policy-map-from-a-connector-policy-template","title":"Creating a policy map from a connector policy template"}]}}},{"node":{"fields":{"slug":"/getting-started/6-automatedprovisioning/2-tutorial/3-creatingrole"},"tableOfContents":{"items":[{"url":"#creating-a-role","title":"Creating a role"},{"url":"#addingdeleting-users-from-a-role","title":"Adding/deleting users from a role"},{"url":"#adding-role-to-ad","title":"Adding role to AD"}]}}},{"node":{"fields":{"slug":"/getting-started/4-application-onboarding/3-importusers-and-entitlements/1-config-synch"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/getting-started/4-application-onboarding/3-importusers-and-entitlements/3-common-questions"},"tableOfContents":{"items":[{"url":"#cron-expressions","title":"Cron expressions"}]}}},{"node":{"fields":{"slug":"/getting-started/6-automatedprovisioning/2-tutorial/4-birthright"},"tableOfContents":{"items":[{"url":"#birthright-access-overview","title":"Birthright access overview"},{"url":"#new-hire","title":"New hire","items":[{"url":"#creating-a-business-rule-that-will-assign-the-user-to-the-role","title":"Creating a business rule that will assign the user to the role"},{"url":"#checking-the-business-rule","title":"Checking the business rule"}]}]}}},{"node":{"fields":{"slug":"/getting-started/6-automatedprovisioning/2-tutorial/1-provisioningCSV"},"tableOfContents":{"items":[{"url":"#loading-applications-list","title":"Loading applications list"},{"url":"#process-example","title":"Process example"}]}}},{"node":{"fields":{"slug":"/getting-started/6-automatedprovisioning/2-tutorial/6-termination"},"tableOfContents":{"items":[{"url":"#step-1-simple-termination","title":"Step 1. Simple termination"},{"url":"#step-2-common-customer-case","title":"Step 2. Common customer case"}]}}},{"node":{"fields":{"slug":"/getting-started/6-automatedprovisioning/2-tutorial/5-transfer"},"tableOfContents":{"items":[{"url":"#step-1-automating-the-change-in-access","title":"Step 1. Automating the change in access"},{"url":"#step-2-position-change-workflow","title":"Step 2. Position change workflow"},{"url":"#invoking-and-validating-position-change","title":"Invoking and validating position change"}]}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/5-ports/1-one-node"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/getting-started/4-application-onboarding/3-importusers-and-entitlements/2-transformationscripts"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/1-singlenode/3-nonroot-partition"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/5-ports/2-three-node"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/1-singlenode/1-rpm-with-internet"},"tableOfContents":{"items":[{"items":[{"url":"#installation-with-internet-access","title":"Installation with Internet access","items":[{"url":"#defining-database-and-infrastructure-components-credentials","title":"Defining database and infrastructure components credentials"},{"url":"#message-broker-password","title":"Message broker password"},{"url":"#memory-cache-password","title":"Memory cache password"},{"url":"#opensearch-credentials","title":"OpenSearch credentials"},{"url":"#cassandra","title":"Cassandra"},{"url":"#initialize-database-schema","title":"Initialize Database Schema"},{"url":"#install-reverse-proxy","title":"Install reverse proxy"},{"url":"#install-prometheus-and-grafana-stack-for-monitoring","title":"Install Prometheus and Grafana stack for monitoring"},{"url":"#check-the-startup-process","title":"Check the startup process"},{"url":"#monitor-the-startup-process","title":"Monitor the startup process"},{"url":"#validate-the-startup","title":"Validate the startup"}]}]},{"url":"#first-time-login","title":"First time login","items":[{"url":"#grafana-and-prometheus-access","title":"Grafana and Prometheus access","items":[{"url":"#for-grafana-access-from-outside-using-public-ip","title":"For Grafana access from outside using public IP"},{"url":"#for-external-prometheus-access","title":"For external Prometheus access"},{"url":"#for-node-exporter-metrics-access","title":"For node exporter metrics access"}]}]},{"url":"#post-installation-information","title":"Post installation information","items":[{"items":[{"url":"#using-the-openiam-command-line-utility","title":"Using the OpenIAM command line utility","items":[{"url":"#check-status","title":"Check status"},{"url":"#check-service-logs","title":"Check service logs"},{"url":"#start-and-stop","title":"Start and stop"},{"url":"#checking-the-health-of-the-application","title":"Checking the health of the application"}]}]}]},{"url":"#core-services-and-default-memory-configuration","title":"Core services and Default Memory configuration"},{"url":"#troubleshooting","title":"Troubleshooting"}]}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/6-upgrading/10-upgrading-2026-4-2"},"tableOfContents":{"items":[{"url":"#prerequisites","title":"Prerequisites","items":[{"url":"#disk-space-verification","title":"Disk space verification"}]},{"url":"#upgrade-process","title":"Upgrade process","items":[{"url":"#execute-the-upgrade-script","title":"Execute the upgrade script"}]},{"url":"#non-internet-based-upgrade-offline-upgrade","title":"Non-internet-based upgrade (offline upgrade)","items":[{"url":"#manual-file-preparation","title":"Manual file preparation"}]},{"url":"#support-case-requirement","title":"Support case requirement"},{"url":"#post-upgrade-validation-recommended","title":"Post-upgrade validation (recommended)"}]}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/6-upgrading/10-upgrading-2026-5-1"},"tableOfContents":{"items":[{"url":"#prerequisites","title":"Prerequisites","items":[{"url":"#disk-space-verification","title":"Disk space verification"}]},{"url":"#upgrade-process","title":"Upgrade process","items":[{"url":"#execute-the-upgrade-script","title":"Execute the upgrade script"}]},{"url":"#non-internet-based-upgrade-offline-upgrade","title":"Non-internet-based upgrade (offline upgrade)","items":[{"url":"#manual-file-preparation","title":"Manual file preparation"}]},{"url":"#support-case-requirement","title":"Support case requirement"},{"url":"#post-upgrade-validation-recommended","title":"Post-upgrade validation (recommended)"}]}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/6-upgrading/1-databasemigration"},"tableOfContents":{"items":[{"url":"#rpm-installation","title":"RPM Installation","items":[{"url":"#postgresql-and-mysql","title":"PostgreSQL and MySQL"},{"url":"#oracle","title":"Oracle"}]}]}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/6-upgrading/3-upgradingto-42111"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/1-singlenode/2-rpm-no-internet"},"tableOfContents":{"items":[{"items":[{"url":"#installation-without-internet-access","title":"Installation without Internet access.","items":[{"url":"#create-database-schema-accounts","title":"Create database schema accounts"},{"url":"#message-broker-password","title":"Message broker password"},{"url":"#memory-cache","title":"Memory cache"},{"url":"#smtp-credentials","title":"SMTP Credentials"},{"url":"#initialize-database-schema","title":"Initialize database schema"},{"url":"#copying-downloaded-file-from-local-machine-to-remote-server","title":"Copying downloaded file from local machine to remote server"},{"url":"#install-prometheus-and-grafana-stack-for-monitoring","title":"Install Prometheus and Grafana stack for monitoring"}]}]},{"url":"#first-time-login","title":"First time login","items":[{"url":"#grafana-and-prometheus-access","title":"Grafana and Prometheus access","items":[{"url":"#for-grafana-access-from-outside-using-public-ip","title":"For Grafana access from outside using public IP"},{"url":"#for-external-prometheus-access","title":"For external Prometheus access"},{"url":"#for-node-exporter-metrics-access","title":"For node exporter metrics access"}]}]},{"url":"#openiam-components-and-status","title":"OpenIAM components and status","items":[{"items":[{"url":"#using-the-openiam-command-line-utility","title":"Using the OpenIAM Command line utility"},{"url":"#openiam-core-services","title":"OpenIAM core services"}]}]}]}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/6-upgrading/2-upgradingto-42110"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/6-upgrading/4-migrating-index-data"},"tableOfContents":{"items":[{"url":"#installing-elasticdump","title":"Installing Elasticdump"},{"url":"#migrating-the-data","title":"Migrating the data"}]}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/6-upgrading/4-upgradingto-42112"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/6-upgrading/5-infrastructure_upgrade"},"tableOfContents":{"items":[{"url":"#openiam-jdk-patches","title":"OpenIAM-JDK patches"},{"url":"#tomcat-patches","title":"Tomcat patches"},{"url":"#elasticsearch-jdk-patch-jdk-2104-lts","title":"Elasticsearch JDK patch (JDK-21.0.4 LTS)"},{"url":"#flyway-jre-patch","title":"Flyway JRE patch"},{"url":"#cassandra-patch","title":"Cassandra patch"}]}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/6-upgrading/7-upgradingto-422"},"tableOfContents":{"items":[{"url":"#pre-upgrade-prerequisites","title":"Pre-upgrade prerequisites"},{"url":"#upgrading-scenarios","title":"Upgrading scenarios","items":[{"url":"#internet-based-upgrade","title":"Internet-based upgrade"},{"url":"#non-internet-based-upgrade","title":"Non-internet-based upgrade"}]}]}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/6-upgrading/6-infra-upgrade-42113"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/6-upgrading/8-upgrading-2026-3-1"},"tableOfContents":{"items":[{"url":"#prerequisites","title":"Prerequisites","items":[{"url":"#disk-space-verification","title":"Disk space verification"}]},{"url":"#upgrade-process","title":"Upgrade process","items":[{"url":"#execute-the-upgrade-script","title":"Execute the upgrade script"}]},{"url":"#non-internet-based-upgrade-offline-upgrade","title":"Non-internet-based upgrade (offline upgrade)","items":[{"url":"#manual-file-preparation","title":"Manual file preparation"}]},{"url":"#support-case-requirement","title":"Support case requirement"},{"url":"#post-upgrade-validation-recommended","title":"Post-upgrade validation (recommended)"}]}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/6-upgrading/8-upgrading-2026-3-2"},"tableOfContents":{"items":[{"url":"#prerequisites","title":"Prerequisites","items":[{"url":"#disk-space-verification","title":"Disk space verification"}]},{"url":"#upgrade-process","title":"Upgrade process","items":[{"url":"#execute-the-upgrade-script","title":"Execute the upgrade script"}]},{"url":"#non-internet-based-upgrade-offline-upgrade","title":"Non-internet-based upgrade (offline upgrade)","items":[{"url":"#manual-file-preparation","title":"Manual file preparation"}]},{"url":"#support-case-requirement","title":"Support case requirement"},{"url":"#post-upgrade-validation-recommended","title":"Post-upgrade validation (recommended)"}]}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/6-upgrading/9-422-changes"},"tableOfContents":{"items":[{"url":"#iam-configuration-and-script-migration","title":"IAM configuration and script migration","items":[{"url":"#page-template-changes","title":"Page template changes"},{"url":"#managed-system-configuration","title":"Managed System configuration"}]},{"url":"#updating-groovy-script-references-in-openiam-tables","title":"Updating Groovy script references in OpenIAM tables","items":[{"url":"#final-verification","title":"Final verification"}]},{"url":"#post-upgrade-tasks","title":"Post-upgrade tasks","items":[{"url":"#update-access_certification-schedule-types","title":"Update access_certification schedule types."},{"url":"#script-updates-required","title":"Script updates required"},{"url":"#ui-customization-and-custom-css-deployment","title":"UI customization and custom CSS deployment"},{"url":"#post-upgrade-content-pattern-restoration","title":"Post-upgrade content pattern restoration"}]},{"url":"#fixing-missing-connectorresponsehandlerscript-in-idm","title":"Fixing missing connector.response.handler.script in IDM"},{"url":"#summary-checklist","title":"Summary checklist"}]}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/6-upgrading/8-upgrading-2026-2-1"},"tableOfContents":{"items":[{"url":"#prerequisites","title":"Prerequisites","items":[{"url":"#disk-space-verification","title":"Disk space verification"}]},{"url":"#upgrade-process","title":"Upgrade process","items":[{"url":"#execute-the-upgrade-script","title":"Execute the upgrade script"}]},{"url":"#non-internet-based-upgrade-offline-upgrade","title":"Non-internet-based upgrade (offline upgrade)","items":[{"url":"#manual-file-preparation","title":"Manual file preparation"}]},{"url":"#support-case-requirement","title":"Support case requirement"},{"url":"#post-upgrade-validation-recommended","title":"Post-upgrade validation (recommended)"}]}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/7-remoteDB/1-oracle"},"tableOfContents":{"items":[{"url":"#preparation","title":"Preparation"},{"url":"#installing-openiam","title":"Installing OpenIAM","items":[{"url":"#editing-database","title":"Editing database"}]}]}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/7-remoteDB/2-postgres"},"tableOfContents":{"items":[{"url":"#configuring-postgres-for-openiam-rpm-installation","title":"Configuring Postgres for OpenIAM RPM Installation","items":[{"url":"#prerequisites","title":"Prerequisites"}]}]}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/6-upgrading/5-upgradingto-42115"},"tableOfContents":{"items":[{"url":"#internet-based-upgrade","title":"Internet-based upgrade"},{"url":"#non-internet-based-upgrade","title":"Non-internet-based upgrade"}]}}},{"node":{"fields":{"slug":"/installation/1-rpm-installation/7-remoteDB/3-MSSQL"},"tableOfContents":{"items":[{"url":"#preparation","title":"Preparation"},{"url":"#installing-openiam","title":"Installing OpenIAM","items":[{"url":"#editing-database","title":"Editing database"}]}]}}},{"node":{"fields":{"slug":"/installation/2-docker-installation/3-upgrading/1-upgrade-4219"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/installation/2-docker-installation/3-upgrading/2-upgrade-42110"},"tableOfContents":{"items":[{"url":"#update-repository-settings","title":"Update repository settings"},{"url":"#upgrade-docker-compose-project","title":"Upgrade docker-compose project"},{"url":"#restart-application-using-updated-docker-compose-project","title":"Restart application using updated docker-compose project"},{"url":"#validate-result-of-the-upgrade-process","title":"Validate result of the upgrade process"}]}}},{"node":{"fields":{"slug":"/installation/2-docker-installation/3-upgrading/3-upgrade-42111"},"tableOfContents":{"items":[{"url":"#update-repository-settings","title":"Update repository settings"},{"url":"#upgrade-docker-compose-project","title":"Upgrade docker-compose project"},{"url":"#restart-application-using-updated-docker-compose-project","title":"Restart application using updated docker-compose project"},{"url":"#validate-result-of-the-upgrade-process","title":"Validate result of the upgrade process"}]}}},{"node":{"fields":{"slug":"/installation/2-docker-installation/3-upgrading/4-upgrade-42115"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/installation/6-kubernetes-installation/5-upgrading/3-upgrade-42113k8-rabbitmq"},"tableOfContents":{"items":[{"url":"#rabbitmq-queue-types-upgrade","title":"RabbitMQ queue types upgrade"}]}}},{"node":{"fields":{"slug":"/installation/6-kubernetes-installation/5-upgrading/4-upgrade-42115k8"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/installation/6-kubernetes-installation/5-upgrading/6-upgrade-422k8"},"tableOfContents":{"items":[{"url":"#migrating-from-elasticsearch-to-opensearch","title":"Migrating from ElasticSearch to OpenSearch."},{"url":"#prerequisites","title":"Prerequisites"},{"url":"#upgrading","title":"Upgrading"}]}}},{"node":{"fields":{"slug":"/installation/6-kubernetes-installation/5-upgrading/5-upgrade-42112k8"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/installation/6-kubernetes-installation/6-k8platforms/1-gce"},"tableOfContents":{"items":[{"url":"#setting-up-the-environment","title":"Setting up the environment"},{"url":"#destroying","title":"Destroying"}]}}},{"node":{"fields":{"slug":"/installation/6-kubernetes-installation/6-k8platforms/2-aws"},"tableOfContents":{"items":[{"url":"#setting-up-the-environment","title":"Setting up the environment"},{"url":"#metricbeat-and-filebeat","title":"Metricbeat and FileBeat","items":[{"url":"#important-note-about-deploying","title":"Important note about deploying"}]},{"url":"#iam","title":"IAM"},{"url":"#destroying","title":"Destroying"},{"url":"#known-issues","title":"Known issues"},{"url":"#update-notes","title":"Update notes","items":[{"url":"#updating-to-4212","title":"Updating to 4.2.1.2"},{"url":"#updating-to-4213","title":"Updating to 4.2.1.3"}]}]}}},{"node":{"fields":{"slug":"/installation/6-kubernetes-installation/6-k8platforms/3-helm"},"tableOfContents":{"items":[{"url":"#setting-up-the-environment","title":"Setting up the environment"},{"url":"#using-a-non-nfs-and-non-longhorn-block-storage-system","title":"Using a non-NFS and non-longhorn block storage system"},{"url":"#destroying","title":"Destroying"},{"url":"#update-notes","title":"Update Notes","items":[{"url":"#updating-to-4212","title":"Updating to 4.2.1.2"}]}]}}},{"node":{"fields":{"slug":"/installation/6-kubernetes-installation/6-k8platforms/4-azure"},"tableOfContents":{"items":[{"url":"#setting-up-the-deployment-environment","title":"Setting up the deployment environment"},{"url":"#installation","title":"Installation"},{"url":"#destroying","title":"Destroying"}]}}},{"node":{"fields":{"slug":"/developerguide/9-synchronization/2-import/ldap/3-ldapattributeslists"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/developerguide/9-synchronization/2-import/ldap/1-ldapvalidation"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/developerguide/9-synchronization/2-import/ldap/2-ldapsynchusers"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/getting-started/4-application-onboarding/2-importentitlements/2-transformationscripts/1-ADgroup-transformation"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/getting-started/4-application-onboarding/2-importentitlements/2-transformationscripts/2-csv-transformation"},"tableOfContents":{"items":[{"url":"#csv-file-structure-example","title":"CSV file structure example"},{"url":"#transformation-script-example","title":"Transformation script example"}]}}},{"node":{"fields":{"slug":"/getting-started/4-application-onboarding/3-importusers-and-entitlements/2-transformationscripts/4-csv-users-entitlements"},"tableOfContents":{"items":[{"url":"#csv-file-structure-example","title":"CSV file structure example"},{"url":"#transformation-script-example","title":"Transformation script example"}]}}},{"node":{"fields":{"slug":"/getting-started/4-application-onboarding/3-importusers-and-entitlements/2-transformationscripts/3-ADtransformation-usergroup"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/changelog/21-Release-4.2.2"},"tableOfContents":{}}},{"node":{"fields":{"slug":"/connectorconfig/microsoft/4-adpowershell"},"tableOfContents":{"items":[{"url":"#installation-and-connection-to-openiam","title":"Installation and connection to OpenIAM"},{"url":"#general-usage","title":"General usage"},{"url":"#provisioning-identities","title":"Provisioning identities","items":[{"url":"#user-provisioning","title":"User provisioning"},{"url":"#group-provisioning","title":"Group provisioning","items":[{"url":"#openiam-configuration","title":"OpenIAM configuration"}]},{"url":"#computer-provisioning","title":"Computer provisioning"},{"url":"#fileshares-provisioning","title":"FileShares provisioning"}]},{"url":"#synchronization","title":"Synchronization","items":[{"url":"#synchronizing-ad-users","title":"Synchronizing AD users","items":[{"url":"#general-query-execution-logic","title":"General query execution logic"},{"url":"#returned-attributes","title":"Returned attributes"},{"url":"#query-syntax","title":"Query syntax"},{"url":"#synchronizing-ad-group-memberships","title":"Synchronizing AD group memberships"},{"url":"#openiam-configuration-for-ad-user-sync","title":"OpenIAM configuration for AD user sync."}]},{"url":"#synchronizing-ad-groups","title":"Synchronizing AD groups","items":[{"url":"#attributes-that-are-returned-by-ad-group-sync","title":"Attributes that are returned by AD Group sync"},{"url":"#openiam-configuration-for-ad-group-sync","title":"OpenIAM configuration for AD group sync."}]},{"url":"#synchronizing-ad-file-shares","title":"Synchronizing AD File shares"},{"url":"#incremental-sync-of-users-or-groups","title":"Incremental sync of users or groups"},{"url":"#urgent-queues","title":"Urgent queues"}]},{"url":"#connector-troubleshooting-and-tips","title":"Connector Troubleshooting and Tips","items":[{"url":"#possible-errors","title":"Possible errors"}]}]}}},{"node":{"fields":{"slug":"/appendix/5-message_en_file"},"tableOfContents":{}}}]}}}