Previous Topic: Token ManagementNext Topic: RSA Authentication Manager SecurID 7 Connector

CA Identity Manager Connector Guides › Connectors Guide › Connecting to Endpoints › RSA ACE (SecurID) Connector › Connector Specific Features › Token Management › Responsibilities List and Account Synchronization › Set Up Principal and Password Authentication › Account Search

Account Search

If the eTSuspensionState attribute is explicitly mentioned in a search request the agent plug-in retrieves a list of tokens assigned to an account, generates a corresponding XML document and returns it as an eTSuspensionState value.

Account Modify

If the eTSuspensionState attribute is included in a modifications list, an account is considered to be already suspended. If a list of modifications in a request contains any updates of the eTRSATokenNumber multi-value attribute, that request is rejected with an LDAP_OPERATIONS_ERROR code and proper message being sent.

Account Suspend

If the eTSuspended attribute is set to “1”, the agent plug-in removes all eTRSATokenNumber values from an account. The account is then suspended.

Account Resume

To resume an account, a modify operation with eTSuspended set to 0 must be run. If the eTSuspensionState attribute is present in the modifications list, the attribute must be used to restore the eTRSATokenNumber values of an account.