IBM Security Verify

 View Only
  • 1.  Adding attribute into Person form in ISIM

    Posted Mon July 19, 2021 01:55 PM
    Hello,

    I need to add erpwlastchanged attribute which is already in the custom Person records in LDAP to person form in ISIM. This attribute is not listed in the Attribute List in Design Forms. I added into custom person formTemplate by editing the erxml attribute in LDAP. It didn't show up in the person form. 
    What is the reason? How can I add this attribute to show up in the person form?

    Thanks
    Hakan

    ------------------------------
    Hakan Aydin
    Security Engineer
    Prime Therapeutics
    ------------------------------


  • 2.  RE: Adding attribute into Person form in ISIM

    Posted Mon July 19, 2021 02:07 PM
    Hello Hakan, 

    This is typically due to the fact that that attribute is in the enRoleHiddenAttributes.properties file (in $ISIM_HOME/data)
    I assume you only want this for display purposes?  If so, be sure to configure the field for read-only.

    ------------------------------
    Grey Thrasher
    IBM
    ------------------------------



  • 3.  RE: Adding attribute into Person form in ISIM

    Posted Mon July 19, 2021 05:15 PM
    Hi Grey,
    Thank you for the quick reply.
    The ISIM version is 7.0.1 fixpack 7. I found the enRoleHiddenAttributes.properties in the VA management console. What is the way of comment it out? There is no option to delete the property. I can only change the property value which is currently same with the property name.

    ------------------------------
    Hakan Aydin
    Security Engineer
    Prime Therapeutics
    ------------------------------



  • 4.  RE: Adding attribute into Person form in ISIM

    Posted Thu August 26, 2021 10:31 AM
    The way commenting out the property is putting # in front of the property value. (I wonder is it documented somewhere?)​
    Sample:


    ------------------------------
    Hakan Aydin
    Security Engineer
    Prime Therapeutics
    ------------------------------



  • 5.  RE: Adding attribute into Person form in ISIM

    Posted Fri August 27, 2021 01:56 AM
    I would think it SHOULD have been documented in this section of the formal documentation https://www.ibm.com/docs/en/sim/7.0.2?topic=configuration-managing-server-properties but it isn't....
    Managing properties on the ISIM VA is really a pain - the "editor" used is only usable if you have to manage a few properties - but for ISIM with properties values in the 1000s this is not the best thing - this is not the most important but although significant thing to be aware of when choosing whether to deploy the SW version (previously version 6.x) or the VA (previously version 7). I does not help that due to the numbering that version 7 was the latest version - but the versions are functionally the same except for the packaging and the necessary results of that...
    That said - in the current version IBM Security Verify Governance 10 - Identity Manager is included in the same version as both SW and VA making this more obvious.

    HTH

    ------------------------------
    Franz Wolfhagen
    IAM Technical Architect for Europe - Certified Consulting IT Specialist
    IBM Security Expert Labs
    ------------------------------