Campaigns
The ORSUS Identity Access and Governance facilitate the management of recertification campaigns for reviewing user entitlements and access-privileges on the managed target system. The recertification campaigns can be scheduled to run on a specific time, and it contains access items (such as Groups/Roles) or users (Group/Role Members) that are reviewed during the campaign. The campaign reviewer (group/role owners) reviews a different subset of access related to object (such as identity, group or group membership) and approves or revokes the access. The system allows to configure revocation and remediation processes so that it automates the process of keeping or revoking the access.
As an authorized user, you can perform the following management tasks for the campaigns.
Create Certification Campaigns
You can create certification campaigns for identities, groups, roles, entitlements and memberships in groups, roles and entitlements. After the campaign is created, the system sends notifications (including approvals and revocations) to the Reviewers (whom you selected in the Approved By field such as Group/Role owners) when the campaign begins. Gatekeepers of an object are considered as Campaign approvers and Supervisors are considered as Escalation recipients.
To create certification campaign:
On the IAG menu, click the Administration tab and then click Governance on the sub-menu.
On the Governance page, click the Certification campaigns tile. The Certification campaigns page appears.
Click the New button.
Provide the following information and click Save.
| Field | Description |
|---|---|
| Re-Certification Type | Select the re-certification type from the drop-down list, whether you want to initiate group or group member campaign. |
| Campaigning Name | Enter the name of the campaign. |
| Campaign Start Date | Enter the start date of the campaign. |
| Campaign End Date | Enter the end date of the campaign. |
| Remedy Action | Select the remedy action that you would like to set when recertification is rejected. |
| Approved by | Select the approver role of the campaign. |
| Recertification Email Templates | Select the email template that will be sent to recertification approvers during the campaign period. |
| Reminder | Click this checkbox if you would like to enable reminders for the campaign that will be triggered after the first email is delivered. And correspondingly enter details like after how many days you would like to trigger reminder, frequency between reminders, and maximum number of reminders. |
| Escalation | Click this checkbox if you would like to enable escalations for the campaign that will be triggered after no response for campaign request. And correspondingly enter details like to whom escalation email should be sent and the email template. |
Approve or Reject Certification Requests
Once the campaign is started, the application sends Certification Campaign email notification to the approvers with a hyperlink that opens the list of certification requests to be approved for Group or group member. You can also open the page manually in the application and check the requests waiting for the approval. The application also sends reminder mails to the approvers when the request has not been either accepted or rejected according to the configuration parameters specified in the Campaign. It automatically rejects the group certification or group membership to the user when that campaign request has not been accepted or rejected in the Campaign timeframe (implicit rejection) and accordingly take the remediation.
To respond to the certification request::
On the IAG menu, click the Administration tab and then click Governance on the sub-menu.
On the Governance page, click the Recertification Campaign tile. The Recertification Campaign page appears.
- Search for the group or group membership request that you would like to respond and then click Approve or Reject button.
View the Campaign Status
After the campaign is started, you can view the status of the campaign such as how many groups or group membership recertification requests are approved or rejected in a graphical representation.
To view the campaign status::
On the IAG menu, click the Administration tab and then click Governance on the sub-menu.
On the Governance page, click the Certification campaigns tile. The Certification campaigns page appears.
Click on the campaign record that you want to view. View the status of how many requests are approved or not responded yet and who approved the request.
View the status of how many requests are approved or not responded yet and who approved the request.