Feedback Ideas

Session timeout control for NIM login sessions. When people with various rights to perform admin rights we should be able to control the amount of time that session lives without requiring a re-authorization. How long is the current setting ? From a security perspective I want to be able to adjust custom rules based on access rights .. eg Admin sessions can only have xyz length , password reset rights etc ..

When executing an app that provides a table of values back to the user, it would be helpful to have a count of the results that we can display. E.g. user runs a form that provides them the recursive results of a group membership. We should be able to have a value that's passed back from that filter that we can display 'X' users returned from that query.

Currently NIM does not use the data types and keys from the connector. To simplify the process in adding an new system this should be automatically loaded and used. Additionally it would be beneficial if relations would be defined and used in the connector too.

Many clients want to be notified when their thresholds are hit for the source and target systems. However, the only means of notifying them is by triggering an email on the error state of a sync. There is no distinct "threshold reached" event that we can trigger on, which makes our notifications more vague than they ought to be. It would be great to have such an event that we could use to trigger an email notification.

NIM currently supports only two access levels: FULL or APPS-only. It would be helpful to have an "admin light" security level for junior admins to manage existing source syncs and run existing schedules/jobs when needed, but not be able to make changes to role model, mappings, filters, or what-have-you.

A proposed idea within the Role Model is to provide a feature for Segregation of Duties. I picture this to work where within a Role you can define another Role that cannot be used. For example if you have a Role Model with 3 Roles (Employee, HR, Payroll). Within the HR Role you say they cannot be part of the Payroll Role. This ensures an HR Employee can't be a Payroll Employee as well. Or you use an analogy, the Person approving the funds cannot also write the checks.

Create a connector for Quickbase

Use Case: Define a filter that returns all Active Employees. Now, for the corresponding 'Inactive Employee AD Accounts' filter, instead of defining the inverse of all the Active conditions, just target all the relevant accounts (ie: AD, EmployeeType == Employee, etc). Add a Lookup Exclude against the 'Active Employee' filter using the EmployeeID named, with the Lookup named 'Inactive Employee Accounts'. This functionality would allow us to more quickly implement filters that have both a set of Grant and Revoke criteria that are just inverse of each other.

To protect NIM configuration natively, we should provide the ability to schedule automatically backups. This is beneficial when there are multiple NIM Administrators making configuration changes and often forget to back up their configuration.

It's no fun getting evaluation reports every hour that show zero changes to be made. An option to only send evaluation reports when there are changes to be made in the target systems would be nice.

Some organizations want to be fully hosted in the cloud for various reasons. Providing a hosted solution for NIM could be benefical to these organizations.

The ability to categorize apps in the interface would be helpful. Also, the ability for users to favorite an app so it always shows at the top would be helpful as well. E.g. local IT always does app X and rather than searching for it each time as we make new apps available it would always show up at the beginning of the available apps.

A client has built a filter with lookups that are available and working in some areas such as 'Mappings' but not available when selecting filters in 'Events' > 'Templates'. The filter is available, but not the lookups. Screenshots attached.

Action for mapping event is only triggered when Mapping is processed in a Job, but not when "Run selected item" is used manually in Mapping. It should be triggered either way to allow for email notification of changes.

Provide the ability to define characters that should not be include in the random password generator