User certifications

The campaign information box will display some basic information about the campaign being viewed, most notably the Campaign Status. For an active certification, the campaign status field is marked in-progress. For a closed certification, it shows the result of the certification, either signed-off, cancelled, or expired.

The stage information box will show a breakdown of the stages within the certification campaign that have tasks that are assigned to you.

Each stage row will show the following information:

Shows a chronological visual of the certification stages. By selecting a stage node, the page will be updated to reflect data for the selected stage.

When a different stage is selected, the user will be able to see information about the previous stage results or future stage events that match with the current list of events available to the certifier in the current stage. The user will not be able to see events in a previous or future stage that target users that they are not responsible for certifying.

Certifiers have access to a handful of stage actions at the certification list level. These are actions that affect all or a selected subset of the targets within the certification. Certain actions are available or unavailable depending on the status of the certification campaign. For example, sign off is only be available if all or some of the events are reviewed or completed.

The full list of actions are:

Users can use the search filter above the certification target list to filter the visible list of users included in the campaign. Any of the columns that are displayed within the table are eligible to be searched against except for the certifier column at the end of the row.

The table headers allow the user to sort the table contents based on the selected column.

Clicking a column header resorts the table based on that criteria, and clicking it a second time reverses the order of sorting. All columns contained in a certification list table are eligible to be used for sorting except for the certifier column at the end of the row

Each individual row within the certification list table contains the data for a single user or object event within a certification. At the beginning of each row is a checkbox used for selecting multiple rows at a time to take bulk stage actions on. The rest of the row contains the data for that user event that corresponds to the headers found at the top of the table.

In order to view the event details of a given event, simply click on the row of the desired event and the details page will dropdown from the top of the page. This is how the user can navigate to the screen to make their certification decisions.

Pagination controls allow the end user to cycle between different pages of results for the given campaign stage. Users also have the ability to choose a rows per page option, to display more or less results per page. The options available are 10, 25, and 50 per page. See section Table Pagination Controls for images and further explanation on pagination.

The event details page for a certification is a complete view of an individual certification event that targets a single user or object. This is where the certifier makes their decisions on certifying or revoking entitlements for the target of the event.

The top of the event details page will have the target’s display name displayed. For user certifications, this will be the name formatted to fit the Display Format defined by the administrator in the system settings.

The event information that correspond to the active event. Based on the status and definition of the certification campaign, several of the following rows may or may not be visible:

The User Information table will display information about the target user for the given event. It will always include at least the user first name, last name, and email address, and will also include any user attributes that are listed in the glossary with a key of displayInUserInfo set to true. This list of additional attributes is the same list that appears as columns within the user certification list table for a campaign. For example, in the screenshot pictured above, the attribute manager has been added as displayable within certifications. Note that these are not calculated at the time the certification is viewed, but rather at creation, so the glossary key for those attributes must be set before a certification is created to appear here. To expand or collapse this table, click the icon at the top right of the table’s header row.

The user attributes table contains all the entitlements that are assigned to the user and are directly tracked and controlled by ForgeRock Identity Manager. Each row within this table is organized into the following format:

Contains attributes within connected systems to be certified for the target user. These are not the attributes that are tracked directly by the ForgeRock Identity Manager user object, but rather the direct values as pulled in through the external systems. Each row within this table is organized into the following format:

To close the event details page and return to the certification list simply click the ‘X’ icon in the top right of the page. Note that there is no submission or save action involved at this stage of the certification process. The actions that you make will persist on the certification event until changed, reset, or eventually signed-off. There is no need to confirm actions in any way.

The closed user certification list functionality is the same as described in section Creating New Certification Definitions for active certifications, with a few minor exceptions described below. For more detailed information on this page and the information it contains, please refer to that section of the document.

The closed event details functionality is the same as described in section User Event Details for active certifications, with a few minor exceptions described below. For more detailed information on this page and the information it contains, please refer to that section of the document.