System Settings
You can use system settings to control many aspects of EmpowerID behavior.
To change values for any of the settings
In the navigation sidebar, expand Admin, then EmpowerID Servers and Settings, and select EmpowerID System Settings.
On the EmpowerID System Settings page that appears, search for the setting that you want to change and click the Edit icon to its left.
In the dialog that appears, you can edit the Value and Description fields, and select whether to Encrypt Data for the setting value.
Do NOT change the Name field for a setting. The name connects the setting value to the option within EmpowerID code, so changing it breaks the connection.
After making changes, click Save.
To add or delete a setting
To delete a setting, click the Delete button to the left of the setting.
To add a setting, click the Add icon above the grid.
In the dialog that appears, provide the following values:Name — Enter a name for the setting. This value cannot have spaces, and must correspond to the name of the setting in code.
Value — Enter a value to pass into the setting.
Description — Enter a description that gives administrators information about what kind of value to enter and what it accomplishes.
Created Date — Optionally enter a date to display to anyone editing the setting. If left blank, this value is provided automatically.
Encrypt Data — Select this option to encrypt the Value text to protect sensitive data.
Click Save.
System Settings
The following table provides the name, default value, and description for each system setting, as well as links to any further information about the setting.
This is a work in progress. Missing descriptions and links coming soon.
Name | Value | Description |
|---|---|---|
ABACEmergencyMode | FALSE | Global setting to determine of the organizations is in a crisis emergency mode |
ABACHighRiskScore | 10000 | Threshold Risk Score to be used in ABAC rules |
AccountInboxJoinAndProvisionFilter | A.PersonID IS NULL AND A.Disabled = 0 AND A.Deleted = 0 AND A.AccountTypeID 2 AND A.AccountUsageTypeID = 1 AND LENA.FirstName 0 AND LENA.LastName 0 | Filter for join and provision, only accounts matching the criteria will be included. This filter appends to the AccountInboxJoinFilter for join and to AccountInboxProvisionFilter for provision see AccountInboxing_GetJoinAndProvisionFilter for sample of how to extend |
AccountInboxJoinByBirthDateFirstNameLastName | TRUE | If turned on, the join rule will try to join new discovered accounts to people, based on matches on those fields |
AccountInboxJoinByCustomMatch | /* -- this is a sample of how to extend the join rules with custom logic. There would be two extra rules to join by Department and City/State --uncomment the outer comment to make it active --retrieve personID by Department, first and last name UPDATE A SET A.PersonID = PJoined.PersonID, A.AttributeJoinedBy ='Department' FROM #Accounts A INNER JOIN SELECT MINP.PersonID PersonID, P.Department , P.LastName , P.FirstName FROM Person P WITH NOLOCK WHERE P.Department IS NOT NULL AND P.PersonID 3 GROUP BY P.Department, P.LastName , P.FirstName HAVING COUNT1=1 PJoined ON PJoined.Department = A.Department AND PJoined.LastName = A.LastName AND PJoined.FirstName = A.FirstName WHERE A.PersonID IS NULL --retrieve personID by City and State, first and last name UPDATE A SET A.PersonID = PJoined.PersonID, A.AttributeJoinedBy ='City and State' FROM #Accounts A INNER JOIN SELECT MINP.PersonID PersonID, P.City ,P.State, P.LastName, P.FirstName FROM Person P WITH NOLOCK WHERE P.City IS NOT NULL AND P.State IS NOT NULL AND P.PersonID 3 GROUP BY P.City ,P.State, P.LastName , P.FirstName HAVING COUNT1=1 PJoined ON PJoined.City = A.City AND PJoined.State = A.State AND PJoined.LastName = A.LastName AND PJoined.FirstName = A.FirstName WHERE A.PersonID IS NULL */ | Extra custom rule/s that run at the end of the join rules by executing the SQL. It has to follow the sample code |
AccountInboxJoinByEmailFirstNameLastName | TRUE | If turned on, the join rule will try to join new discovered accounts to people, based on matches on those fields |
AccountInboxJoinByEmployeeIDFirstNameLastName | TRUE | If turned on, the join rule will try to join new discovered accounts to people, based on matches on those fields |
AccountInboxJoinByPersonalEmailFirstNameLastName | TRUE | If turned on, the join rule will try to join new discovered accounts to people, based on matches on those fields |
AccountInboxJoinFilter | A.AllowJoin = 1 | Filter for join, only accounts matching the criteria will be included. This filter appends to the AccountInboxJoinAndProvisionFilter see AccountInboxing_GetJoinFilter for sample of how to extend |
AccountInboxProvisionFilter | A.AllowProvision = 1 AND EXISTSSELECT 1 FROM AccountStore S WHERE A.AccountStoreID = S.AccountStoreID AND S.AllowPersonProvisioning = 1 | Filter for PROVISION, only accounts matching the criteria will be included. This filter appends to the AccountInboxJoinAndProvisionFilter see AccountInboxing_GetProvisionFilter for sample of how to extend |
ADUserCreatePostProcessingAlertEnabled | FALSE | Global Setting to Enable or Disable ADUserCreatePostProcessingAlert |
AllowSetMustChangePasswordAtNextLogon | TRUE | Allow Set Must Change Password At Next Logon |
AllowWebApiMethodInvokeProfiling | TRUE |
|
AllowWebApiMethodInvokesWithoutCheck | TRUE |
|
API_IISAppName | API |
|
ApplicationLauncherOAuthConsumerGUID | f0ade541-52d1-4f60-9201-f58e9dc8f7fb |
|
ApplicationLauncherOAuthProviderApplicationGUID | 25629B1D-1585-4D19-A58F-A74D00EA30B0 |
|
ApplicationLauncherSamlConnectionID | 1 |
|
ApplicationLauncherServiceProviderGuid |
|
|