Via reports module administrators can prepare reports of identities, roles and many others.

Each report can have parameters to choose from. e.g. "include only valid roles" (not those valid in future or past). All generated reports are available in web GUI, where also the status of the report is shown (Running/Executed). There, after the report is prepared, users can download it. Reports are now available in those formats: csv, xlsx, json.

More about reports module you can find here. Tutorial how create your own report is here.

Identity account management is a long time in our product, but you can now use basic account management for other supported entity types (Role, Catalog Role, Tree).

Account management can be managed by a script (Groovy) that you can define in the detail of the system mapping.

More about basic account management you can find here.

The main use-case for this option is initial linking of accounts during the reconciliation of a system, where the accounts will be further managed by CzechIdM - e.g. LDAP, AD. The default role will be usually configured for provisioning on this system.

The value can be any role in CzechIdM. This value is used in the case that the synchronization links an existing system account to an existing or new identity in CzechIdM. If the default role is specified, this role will be assigned to the identity for its main valid contractual relationship.

More about default role you can find here.

Identity life cycle is now controlled by state. State is changed automatically by system - when identity is created, contract to identity is added or removed etc.

More about identity state you can find here.