Security

I want to use a role to trigger CPPM to send an e-mail warning our helpdesk of user certificates about to expire, so I have a role mapping policy where I check to see if Certificate::Not-Valid-After is LESS_THAN a date:

Is there a way to do this with a variable, like @Today or other way to make this not require me to change the date regularly?

Hi,

You may use the [Time Source] as an authorization source and derive your condition like,

(Certificate:Not-Valid-After  LESS_THAN_OR_EQUALS  %{Authorization:[Time Source]:One Week DT})

You can refer the available filters under Configuration >> Sources >> [Time Source] >> Attributes for one day, one week, etc,.

Note: [Time Source] should be mapped as authorization source in the service.

I knew the community would have my answer!

I'm trying to go back through services I wrote when we first deployed and making then better - sometimes I draw a blank.

Thanks for the quick and direct solution.