Previous Topic: Configure Well-Known Attributes

Next Topic: Validation Rules

How to Configure Self-Subscribing Groups

You can enable self-service users to join groups by configuring support for self-subscribing groups in the directory configuration file.

  1. In the Self-subscribing Groups section, add a SelfSubscribingGroups element as follows:
    <SelfSubscribingGroups type=search_type org=org_dn>
    
  2. Type values for the following parameters:
    type

    Indicates where CA Identity Manager searches for self-subscribing groups. The valid values are as follows:

    • NONE—CA Identity Manager does not search for groups. Specify NONE to prevent users from subscribing to groups.
    • ALL—CA Identity Manager searches all groups in the user store. Specify ALL when users can subscribe to all groups.
    • INDICATEDORG (for environments that support organizations only)—CA Identity Manager searches for self-subscribing groups in the user’s organization and its suborganizations. For example, when a user’s profile is in the Marketing organization, CA Identity Manager searches for self-subscribing groups in the Marketing organization, and in all suborganizations.
    • SPECIFICORG (for environments that support organizations only)—CA Identity Manager searches in a specific organization. Supply the unique identifier of the specific organization in the org parameter.
    org

    Defines the unique identifier of the organization where CA Identity Manager searches for self-subscribing groups.

    Note: You must specify the org parameter if type=SPECIFICORG.

  3. Restart the SiteMinder Policy Server if you changed any of the following:

Once support for self-subscribing groups is configured in the Identity Manager directory, Identity Manager administrators can specify which groups are self-subscribing in the User Console.

When a user self-registers, CA Identity Manager looks for groups in the specified organizations, and then displays the self-subscribing groups to the user.