Configuration Guide › Creating an Identity Manager Directory for an LDAP User Store › User, Group and Organization Managed Object Descriptions › Managing Sensitive Attributes

Managing Sensitive Attributes

Identity Manager provides the following methods for managing sensitive attributes:

• Data classifications for attributes

  Data classifications allow you to specify display and encryption properties for attributes in the directory configuration file (directory.xml).

  You can define data classifications that manage sensitive attributes as follows:

  • Display the value of an attribute as a series of asterisks in Identity Manager task screens.

    For example, you can display passwords as asterisks instead of displaying them in clear text.

  • Hide the attribute value in View Submitted Task screens

    This enables you to hide attributes, such as salary, from administrators who need to view task status in Identity Manager but do not need to view salary details.

  • Ignore certain attributes when creating a copy of an existing object.
  • Encrypt an attribute
• Field styles in task profile screens

  If you do not want to modify an attribute in the directory.xml file, you can set the display property for the attribute in screen definitions where the sensitive attribute appears.

  The field style enables you to display attributes, such as passwords, as a series of asterisks instead of clear text.

  Note: For more information about the field style for sensitive attributes, see the Administration Guide and the User Console online help.