Types of Validation Rules

The two types of validation rules are as follows:

Task-level validation—validates an attribute value against other attributes in the task. For example, you can verify that the area code in a user-supplied telephone number is appropriate for the user’s city and state.
During task-screen configuration, task-level validation rules are directly associated with task screen fields.

You can use this type of validation to enforce data integrity.
Directory-level validation—validates the attribute value itself, and not in the context of other attributes in the task. For example, you can verify that a user-supplied telephone number matches the nnn-nnn-nnnn format used in the directory.
In directory.xml, directory-level validation rules are mapped to a managed object attribute through a rule set. The rules in the rule set are applied to any task screen field configured with the attribute.

You can use this type of validation to enforce user directory requirements.

CA IdentityMinder executes task-level validation rules before directory-level validation rules.