Configuration Guide › Creating an Identity Manager Directory for an LDAP User Store › How to Configure Groups › Configure Self-Subscribing Groups

Configure Self-Subscribing Groups

You can enable self-service users to join groups by configuring support for self-subscribing groups in the directory configuration file.

When a user self-registers, CA Identity Manager looks for groups in specified organizations, and displays the self-subscribing groups to the user.

To configure a self-subscribing group

1. In the Self-subscribing Groups section, add a SelfSubscribingGroups element as follows:

   <SelfSubscribingGroups type=search_type org=org_dn>

2. Add values for the following parameters:
   • type

     Indicates where CA Identity Manager searches for self-subscribing groups as follows:

     • NONE—CA Identity Manager does not search for groups. Specify NONE to prevent users from self-subscribing to groups.
     • ALL—CA Identity Manager begins searching for groups at the root. Specify ALL when users can subscribe to groups throughout a hierarchical directory.
     • INDICATEDORG—CA Identity Manager searches for self-subscribing groups in the user's organization and its suborganizations. For example, when a user's profile is in the Marketing organization, CA Identity Manager searches for self-subscribing groups in the Marketing organization, and in all suborganizations.
     • SPECIFICORG—CA Identity Manager searches in a specific organization. Supply the distinguished name (DN) of the specific organization in the org parameter.
   • org

     Specifies the unique identifier of the organization where CA Identity Manager searches for self-subscribing groups.

     Note: You must specify the org parameter when type=SPECIFICORG.

Once support for self-subscribing groups is configured in the Identity Manager directory, Identity Manager administrators can specify which groups are self-subscribing in the User Console.

Note: For more information about managing groups, see the Administration Guide.