Certifications Tab
Use the Certifications tab to view certification requests that are complete or in the process of running.
| Column | Description |
|---|---|
| Name | The type of certification scheduled and the date and time when it was first launched. |
| Owner | The user that started the certification request |
| Status | Current status of the certification request. Pending, Active, or Staged. |
| Percent Complete | Percentage of certification completion based on the number of access reviews in the certification. |
| Create Date | The date and time when the certification request was generated. |
| Tags | Assigned labels that are used to classify certifications for searching and reporting. |
The detailed results page contains all of the information that is available for the scheduled certifications.
Click a certification to display the detailed results page for that certification. Right-click and select Change Owner to assign a new owner for this certification or select Use as Template to use this certification as a template to schedule a new certification.
Note
A change to the owner does not reassign or forward this certification to the new owner and no notification is sent to the new owner upon the change. The new owner name is associated with the certification throughout IdentityIQ.
The Certification Results page displays the name and owner of the certification, the date it was created, and status bars to track completion of the reviews, including the information described in the table below. For each access review, a description of the access review, including additional information, is described in the Access Reviews section of the table.
Access Review Information
| Item | Description |
|---|---|
| View Certification Options | Click to view all of the certification parameters. |
| Exclusions | Click to view which items were not included in the certification. |
| completed | The date and time when the certification request was completed. The completed status is based on the completion of all certification components. |
| Decision Statistics | |
| Roles | Pie chart with statistical data for open, approved and remediated business role items for the access reviews within the certification. This pie chart is only visible if Include Roles was enabled in the Basic section of the certification schedule creation. |
| Additional Entitlements | Pie chart with statistical data for open, approved and remediated entitlement items for the access reviews within the certification. This pie chart is only visible if Include Additional Entitlements was enabled in the Basic section of the certification schedule creation. |
| Policy Violations | Pie chart with statistical data for open, allowed and remediated policy violations for the access reviews within the certification. This pie chart is only visible if Include Policy Violations was enabled in the Basic section of the certification schedule creation. |
| Access Reviews | |
| Description | The type of certification. |
| Percent Complete | The percentage of the certification that is complete. For example, 46% (6 of 13) means 6 of the 13 users on the list, or 46% of the total number, have been acted upon. |
| Phase | The current phase of the certification process. The challenge and revocation phases are only active if those functions were activated when the certification request was scheduled. |
| Phase End | The date and time when the current phase ends and the next phase begins. The length of each phase is specified when the certification request is scheduled. |
| Tags | Tags are used to classify certifications for searching and reporting. Tags are assigned when certifications are scheduled. |
| Certifiers | The name of the person responsible for acting on the access review. |
| Due | The date and time when the access review decision is required. |
| E-signed | A check-mark icon indicates that an electronic signature exists. An electronic signature performs the same authorization checking as the IdentityIQ login page. |
The information displayed for each certification varies based on the type of certification and the parameters specified when the schedule is created.
For example, a manager certification results page can contain the number of access reviews that were generated, the managers who were assigned the requests, and the active period for this schedule.
Certification Schedules Tab
Use the Certification Schedules tab to view and edit information about pending and periodic.
Note
Certifications that are scheduled to run one time are considered to be pending and are removed from the list of scheduled certifications after the scheduled run time.
Periodic certifications are scheduled to run on a periodic basis, such as hourly, daily, weekly, monthly, quarterly, and annually. Periodic access reviews provide a snapshot view of the identities, roles, and account groups in your enterprise. Periodic certifications focus on the frequency that entire entities (identities, roles, account groups) must be certified.
Periodic certifications are not complete until all access reviews included in the certification are complete. An access review is not complete until all actions are complete and the user who is assigned the access review confirms the decisions.
Periodic certifications can be created using a multi-level sign-off structure which enables multiple certifiers to review access reviews before they are considered complete. For example, a certification can be created for the direct reports of a team leader who knows his employees, but is not authorized to make final certification decisions. When the team leader makes his decisions and signs off on the access review, it can be forwarded to the department manager to review the decisions and make changes if necessary.
The Certifications Schedule tab contains the following information:
| Column | Description |
|---|---|
| Name | The type of certification scheduled and the date and time when it was launched. |
| Task | The task that was performed. |
| Next Execution | The next date and time when the certification runs. |
| Last Execution | The date and time when the certification ran last. |
| Result | Result status of the last run of the certification, for example Success or Failed. |
| Owner | The user who started the certification request |
Click an existing certification to view the details defined for the certification when it was created. Certifications can be modified for future certifications. Actions that were taken on the access reviews included in the certification and the current phase of the certification determine which items can be modified.