Previous Topic: Where Information about Accessors Is Stored

Next Topic: Integration with the Enterprise User Stores


How CA Access Control Finds a User Record

When a user logs in, CA Access Control conducts the search in the following order, until it finds a record associated with the user:

  1. CA Access Control searches for a user defined in its database.
  2. CA Access Control searches its cache for an enterprise user of that name.

    When the network is down, the operating system (OS) lets users log in using the OS cached credentials. The purpose of the CA Access Control cache is to let CA Access Control also use enterprise users' records in these cases.

  3. CA Access Control uses the operating system to search the enterprise user stores for a user of that name.
  4. If CA Access Control does not find a record associated with the user in its database or in the enterprise stores, CA Access Control assigns the user the attributes in the _undefined USER record.