Working With Attachment Rules

You can implement multiple rules to manage various use cases or requirements. IdentityIQ includes some sample rules that you can use as a model for developing your own.

Rules that govern file attachments are of rule type AttachmentConfig. Any rules with a type of AttachmentConfig appear in the selection list of rules in Global Settings. You can choose more than one rule to govern requirements for attachments; use Ctrl-click to select multiple rules to activate.

Attachment rules are inactive by default. To activate rules that govern attachments:

1. Select the gear menu and navigate to Global Settings > IdentityIQ Configuration.

2. Select the Miscellaneous tab.

3. In the Attachment Settings section of the Miscellaneous tab, select all the rules you want to activate. Use Ctrl-click to select multiple rules to activate. Selected rules are highlighted in blue.

4. Save your changes. When you save your changes, the active rules remain highlighted.

Note: When an attachment rule is enabled, the requestor will see an error message if they try to submit an access request without the required attachment.

Rules that govern requirements for attachments use BeanShell to determine the rule's behavior. BeanShell provides a great deal of flexibility in what your rules can do, including things like who or what the rule applies to, and what messaging the UI will show users regarding attachments.

For an overview of developing and using rules in IdentityIQ, see Rules and Scripts in IdentityIQ.

See Sample Attachment Configuration Rule: Contractor Work Authorization Form for a simple example rule to help you understand how to create your own attachment rules.