Configuration Guide › Relational Database Management › Well-Known Attributes for a Relational Database › User Well-Known Attributes

User Well-Known Attributes

A list of user well-known attributes follows:

%ADMIN_ROLE_CONSTRAINT%

Contains the list of admin roles that are assigned to the administrator..

The physical attribute which is mapped to %ADMIN_ROLE_CONSTRAINT% must be multivalued to accommodate multiple roles.

We recommend indexing the attribute that is mapped to %ADMIN_ROLE_CONSTRAINT%.

%CERTIFICATION_STATUS%

(Required for using the user certification feature)

Contains the certification status of a user.

Note: For more information about user certification, see the Administration Guide.

%DELEGATORS%

Maps to a list of users who have delegated work items to the current user.

This attribute is required to use delegation. The physical attribute that mapped to %DELEGATORS% must be multivalued and capable of holding strings.

Important! Editing this field directly using CA IdentityMinder tasks or an external tool can cause significant security implications.

%EMAIL%

(Required for enabling the email notification feature)

Stores email address of a user.

%ENABLED_STATE%

(Required)

Tracks the status of a user.

Note: The data type of the physical attribute which is mapped to %ENABLED_STATE% must be String.

%FIRST_NAME%

Contains first name of a user.

%FULL_NAME%

(Required)

Contains first and last name of a user.

%IDENTITY_POLICY%

Contains the list of identity policies that have been applied to a user account.

CA IdentityMinder uses this attribute to determine whether an identity policy must be applied to a user. If the policy has the Apply Once setting enabled and the policy is listed in the %IDENTITY_POLICY% attribute, CA IdentityMinder does not apply the changes in the policy to the user.

Note: For more information about identity policies, see the Administration Guide.

%LAST_CERTIFIED_DATE%

(Required for using the user certification feature)

Contains the date when the role of a user were certified.

Note: For more information about user certification, see the Administration Guide.

%LAST_NAME%

Contains last name of a user.

%ORG_MEMBERSHIP%

(Required when organizations are supported)

Contains the unique identifier for the organization to which the user belongs.

%ORG_MEMBERSHIP_NAME%

(Required when organizations are supported)

Contains the user-friendly name of the organization to which the user belongs.

%PASSWORD%

Contains a user password.

Note: The value of the %PASSWORD% attribute is always displayed as a series of asterisk (*) characters in CA IdentityMinder screens, even when the attribute or field is not set to hide passwords.

%PASSWORD_DATA%

(Required for password policy support)

Specifies the attribute that tracks password policy information.

Note: The value of the %PASSWORD_DATA% attribute is always displayed as a series of asterisk (*) characters in CA IdentityMinder screens, even when the attribute or field is not set to hide passwords.

%PASSWORD_HINT%

(Required)

Contains user-specified question and answer pairs. The question and answer pairs are used in case of forgotten passwords.

Note: The value of the %PASSWORD_HINT% attribute is always displayed as a series of asterisk (*) characters in CA IdentityMinder screens, even when the attribute or field is not set to hide passwords.

%USER_ID%

(Required)

Stores a user login ID.

More information:

Organization Management