EmpowerID System Settings
You can use system settings to control many aspects of EmpowerID behavior.
To access these settings, you must be a member of the SaaS Admin Management Role.
How to change values for any of the system settings
On the navbar, go to Infrastructure Admin > EmpowerID Servers and Settings > EmpowerID System Settings.
On the EmpowerID System Settings page, search for the setting that you want to change and click the Edit icon to its left.
In the dialog that appears, you can edit the Value and Description fields, and select whether to Encrypt Data for the setting value. If selected, users cannot view or recover the data within the UI.
After making changes, click Save.
The following table provides the name, default value, and description for each system setting, as well as links to any further information about the setting.
Name | Value | Description |
ABACHighRiskScore | 10000 | Threshold Risk Score to be used in ABAC rules |
AccountInboxFilterToExcludeFromJoin |
| Select query to exclude the AccountIDs from getting joined /* Select AccountID from xyz*/ |
AccountInboxFilterToExcludeFromPersonProvision |
| Select query to exclude the AccountIDs from getting provisioned /* Select AccountID from xyz*/ |
AccountInboxJoinAndProvisionFilter | A.PersonID IS NULL AND A.Disabled = 0 AND A.Deleted = 0 AND | Filter for join and provision, only accounts matching the criteria will be included. This filter appends to the AccountInboxJoinFilter for join and to AccountInboxProvisionFilter for provision see AccountInboxing_GetJoinAndProvisionFilter for sample of how to extend |
AccountInboxJoinByBirthDateFirstNameLastName | True | If turned on, the join rule will try to join new discovered accounts to people, based on matches on those fields |
AccountInboxJoinByCustomMatch | /* -- this is a sample of how to extend the join rules with custom logic. There would be two extra rules to join by Department and City/State--uncomment the outer comment to make it active--retrieve personID by Department, first and last nameUPDATE ASET A.PersonID = PJoined.PersonID,A.AttributeJoinedBy ="Department"FROM #Accounts AINNER JOIN SELECT MINP.PersonID PersonID, P.Department , P.LastName , P.FirstName FROM Person P WITH NOLOCKWHERE P.Department IS NOT NULL AND P.PersonID 3GROUP BY P.Department, P.LastName , P.FirstName HAVING COUNT1=1 PJoined ON PJoined.Department = A.Department AND PJoined.LastName = A.LastName AND PJoined.FirstName = A.FirstName WHERE A.PersonID IS NULL --retrieve personID by City and State, first and last nameUPDATE ASET A.PersonID = PJoined.PersonID,A.AttributeJoinedBy ="City and State"FROM #Accounts AINNER JOIN SELECT MINP.PersonID PersonID, P.City ,P.State, P.LastName, P.FirstName FROM Person P WITH NOLOCKWHERE P.City IS NOT NULL AND P.State IS NOT NULL AND P.PersonID 3GROUP BY P.City ,P.State, P.LastName , P.FirstName HAVING COUNT1=1 PJoined ON PJoined.City = A.City AND PJoined.State = A.State AND PJoined.LastName = A.LastName AND PJoined.FirstName = A.FirstName WHERE A.PersonID IS NULL */ | Extra custom rule/s that run at the end of the join rules by executing the SQL. It has to follow the sample code |
AccountInboxJoinByEmail | false | If turned on, the join rule will try to join new discovered accounts to people, based on matches on those fields |
AccountInboxJoinByEmailFirstNameLastName | True | If turned on, the join rule will try to join new discovered accounts to people, based on matches on those fields |
AccountInboxJoinByEmployeeID | True | If turned on, the join rule will try to join new discovered accounts to people, based on matches on those fields |
AccountInboxJoinByEmployeeIDFirstNameLastName | True | If turned on, the join rule will try to join new discovered accounts to people, based on matches on those fields |
AccountInboxJoinByEmployeeIDOther | True | If turned on, the join rule will try to join new discovered accounts to people, based on matches on those fields |
AccountInboxJoinByLogonNameFirstNameLastName | True | If turned on, the join rule will try to join new discovered accounts to people, based on matches on those fields |
AccountInboxJoinByPersonalEmailFirstNameLastName | True | If turned on, the join rule will try to join new discovered accounts to people, based on matches on those fields |
AccountInboxJoinCustomMatchAttributes |
| Account attributes that must match for join |