HelloID

Recertification ensures that users in your organization have appropriate access to self-service products based on the latest policies.

Over time, access permissions may become outdated or no longer align with current rules. For example, a product may not have been returned after a user was disabled, a user may no longer have the required group memberships, or a product may have been assigned multiple times to the same user even though the current self-service product configuration only allows one assignment per user.

Recertification campaigns automate the process of reviewing and validating user access to self-service products.

There are two types of recertification campaigns: system campaigns, of which the name and scope cannot be modified, and custom campaigns, which each have their own scope of assigned products.

When it runs, a recertification campaign generates Insights: an overview of approved product requests that qualify for recertification within the scope of the campaign. Insights can be viewed via the Recertification insights end-user page. Insights are always generated. Depending on its settings, a recertification campaign may also trigger Recertification requests for these assigned products.

Successive runs of a recertification campaign are called iterations. Each iteration recalculates which approved product requests fall in the scope of the campaign, and optionally triggers recertification requests.

To get started, edit the recertification settings. Then, start a new campaign iteration of a system campaign, or create a custom campaign.