Configuration Guide › LDAP User Store Management › User, Group, and Organization Managed Object Descriptions › Managing Sensitive Attributes

Managing Sensitive Attributes

CA Identity Manager provides the following methods for managing sensitive attributes:

• Data classifications for attributes

  Data classifications allow you to specify display and encryption properties for attributes in the directory configuration file (directory.xml).

  You can define data classifications that manage sensitive attributes as follows:

  • In CA Identity Manager task screens, display the value of an attribute as a series of asterisks.

    For example, you can display passwords as asterisks instead of displaying them in clear text.

  • In View Submitted Task screens, hide the attribute value.

    This option enables you to hide attributes from administrators. For instance, hiding salary details such as the salary from administrators who view task status in CA Identity Manager but do not need to view salary details.

  • Ignore certain attributes when creating a copy of an existing object.
  • Encrypt an attribute
• Field styles in task profile screens

  If you do not want to modify an attribute in the directory.xml file, set the display property for the attribute in screen definitions where the sensitive attribute appears.

  The field style enables you to display attributes, such as passwords, as a series of asterisks instead of clear text.

  Note: For more information about the field style for sensitive attributes, see the Administration Guide and the User Console online help.