Previous Topic: Configure Well-Known AttributesNext Topic: Validation Rules


How to Configure Self-Subscribing Groups

You can enable self-service users to join groups by configuring support for self-subscribing groups in the directory configuration file.

Follow these steps:

  1. In the Self-subscribing Groups section, add a SelfSubscribingGroups element as follows:
    <SelfSubscribingGroups type=search_type org=org_dn>
    
  2. Type values for the following parameters:
    type

    Indicates where CA IdentityMinder searches for self-subscribing groups. The valid values are as follows:

    • NONE—CA IdentityMinder does not search for groups. Specify NONE to prevent users from subscribing to groups.
    • ALL—CA IdentityMinder searches all groups in the user store. Specify ALL when users can subscribe to all groups.
    • INDICATEDORG (for environments that support organizations only)—CA IdentityMinder searches for self-subscribing groups in the organization of a user and its suborganizations. For example, when the profile of a user is in the Marketing organization, CA IdentityMinder searches for self-subscribing groups in the Marketing organization, and in all suborganizations.
    • SPECIFICORG (for environments that support organizations only)—CA IdentityMinder searches in a specific organization. Supply the unique identifier of the specific organization in the org parameter.
    org

    Defines the unique identifier of the organization where CA IdentityMinder searches for self-subscribing groups.

    Note: Make sure that you specify the org parameter if type=SPECIFICORG.

  3. Restart the SiteMinder Policy Server if you changed any of the following items:

Once support for self-subscribing groups is configured in the CA IdentityMinder directory, CA IdentityMinder administrators can specify which groups are self-subscribing in the User Console.

When a user self-registers, CA IdentityMinder looks for groups in the specified organizations and it displays the self-subscribing groups to the user.