Configuration Guide › CA GovernanceMinder System Properties › Implicit Accounts

Implicit Accounts

When a CA GovernanceMinder universe does not have account configurations, or a user has no accounts on external endpoints, account information is unavailable. CA GovernanceMinder creates an implicit account to relate resources to users even when account information is unavailable from external endpoints.

Implicit accounts have the following structure:

• Account name - The account name is taken from the field specified in the implicit.accounts.field.name property.
• Mapped endpoint - The default mapped endpoint is taken from the Configuration resource application field that is specified for the universe.

The following system parameters control implicit accounts:

implicit.accounts.enabled

Specifies if CA GovernanceMinder creates implicit accounts for users.

Valid values; True, False

Default: False

Note: We recommend using account correlation instead of enabling this feature.

implicit.accounts.field.name

Specifies the field of user records that is used to name implicit accounts. Typically this is the loginID field.

Default: personId

implicit.accounts.field.nameuniverse_name

Specifies the field of user records that is used to name implicit accounts in the specified universe. This value overrides the value of the implicit.accounts.field.name property for the specified universe.

Note: There is no period between name and universe_name in this field.

universe

Defines the universe that uses the field specified to name implicit accounts.

Implicit accounts have the following structure;

The account name is taken from the field specified in the implicit.accounts.field.name property.

• The default mapped endpoint is taken from the Configuration resource application field specified for the universe.