Keywords › IDLABEL Keyword—Specify Identity Propagation Label

IDLABEL Keyword—Specify Identity Propagation Label

Valid on z/OS.

Use the IDLABEL keyword to specify the label associated with the Identity Propagation name filter.

This keyword has the following format:

TSS ADDTO(acid) IDMAP(recid) IDMAPDN('distributed-identify-username-filter') IDMAPRN('DISTRIBUTED-IDENTIFY-REGIStryname') [IDLABEL('32-byte label')]

The label name must be enclosed in single quotation marks if embedded blanks are used.

Up to 32 characters can be specified for the label name. It can contain embedded blanks and mixed-case characters, and it is stripped of leading and trailing blanks. If a single quotation mark is intended to be part of the label name, use two single quotation marks together for each single quotation mark within the string, and the entire string must be enclosed within single quotation marks.

IDLABEL is optional on the TSS ADDTO IDMAP command. If it not included on the command, the record identifier name entered for IDMAP is automatically used for IDLABEL.

This keyword is used with:

• The commands ADDTO, LIST, REMOVE, and REPLACE
• The ACID types User, DCA, VCA, ZCA, LSCA, and SCA
• ACID(MAINTAIN) authority

Example: IDLABEL keyword

This example shows IDMAP, IDMAPDN, IDMAPRN, and IDLABEL keyword usage in one TSS ADDTO command.

The following command adds the JDoe ACID and specifies the IDMAP, IDMAPDN, IDMAPRN, and IDLABEL:

TSS ADD(JDoe) IDMAP(JDoeIDM1) IDMAPDN('JDoe Distinguished name') IDMAPRN('JDoe Registry name') IDLABEL('JDoe ID Propagation Record')

The following command lists all fields associated with the specified IDLABEL:

TSS LIST(JDoe) IDLABEL('JDoe ID Propagation Record')

IDMAPDN, IDLABEL, and IDMAPRN Usage Rules

When using these keywords, note the following rules:

• The combination of IDMAPDN and IDMAPRN must be unique across all IDMAP records. If it is not, an error message that shows the existing record ID will appear.
• The combination of Recid (Logonid portion) and IDLABEL must be unique across all IDMAP records. If it is not, an error message that shows the existing record ID will appear.