Configuration Guide › LDAP User Store Management › Connection to the User Directory › Provider Element › Credentials Subelement

Credentials Subelement

To connect to an LDAP directory, CA IdentityMinder must provide valid credentials. The credentials are defined in the Credentials subelement, which resembles the following code:

<Credentials user="@SMDirUser" cleartext="true">
  "MyPassword"
</Credentials>

If you do not specify a password in the Credentials subelement prompts for the password, when you create the CA IdentityMinder directory in the Management Console.

Note: We recommend specifying the password in the Management Console.

If you specify the password in the Management Console, CA IdentityMinder encrypts the password for you. Otherwise, If you do not want the password to appear in clear text, encrypt the password using the password tool that is installed with CA IdentityMinder.

Note: You can specify only one set of credentials. If you define multiple directories, as described in Connection Subelement, the credentials that you specify must apply to all the directories.

The Credentials subelement includes the following parameters:

user

Specifies the login ID for an account that can access the directory.

For provisioning users, the user account that you specify must have the Domain Administrator profile or an equivalent set of privileges in the Provisioning Server.

Note: Do not specify a value for the user parameter in the directory.xml file. CA IdentityMinder prompts you to supply the login ID when you create the CA IdentityMinder Directory in the Management Console.

cleartext

Determines whether the password is displayed in clear text in the directory.xml file, as follows:

• True—The password is displayed in clear text.
• False—The password is encrypted (default).

Note: The parameters are optional.