Logical
Attributes
The following tables list the set of fixed logical attribute names used in the Java application programming interface (API) of the User Management Engine (UME). The tables provide descriptions for attributes with names that are not self-explanatory.
General Attributes (Valid for all principal types, namely, user, user account, group, role)
Attribute Name |
Description |
datasource |
Identifies the data source where the object is stored. |
description |
|
displayname |
|
uniquename |
Used to search for users, groups, and roles for display in applications such as the role assignment tool. The uniquename is part of the unique ID described in Home Data Source. |
CREATED_BY |
|
LAST_MODIFIED_BY |
|
PRINCIPAL_CREATION_DATE |
|
PRINCIPAL_MODIFY_DATE |
|
PRINCIPAL_RELATION_MEMBER_ATTRIBUTE |
member |
PRINCIPAL_RELATION_PARENT_ATTRIBUTE |
member of |
User
Attribute Name |
Description |
firstname |
|
lastname |
|
salutation |
|
title |
|
jobtitle |
|
company |
|
companyid |
|
department |
|
position |
|
currency |
|
|
|
telephone |
|
mobile |
|
fax |
|
streetaddress |
|
city |
|
zip |
|
pobox |
|
country |
|
state |
|
dateformat |
|
locale |
|
timezone |
|
orgunit |
Text field. |
accessibilitylevel |
Indicates accessibility mode for the user. |
ps_link |
The URL of the privacy statement accepted by the user during self-registration. |
ps_timestamp |
The date the user accepted the privacy statement during self-registration. |
ps_version |
The version of the privacy statement accepted by the user during self-registration. |
Account
Attribute Name |
Description |
j_user |
Logon ID of account |
j_password |
Password |
javax.servlet.request.X509Certificate |
Certificate |
userid |
Corresponding user ID |
validfrom |
|
validto |
|
islocked |
|
lockreason |
|
lockdate |
|
lastfailedlogon |
|
lastlogout |
|
failedlogonattempts |
|
lastsuccessfulllogon |
deprecated |
successfulllogoncount |
deprecated |
passwordchangerequired |
|
lastpasswordchange |
|
lastsuccessfulpasswordcheck |
|
ispassworddisabled |
|
passwordhistory |
|
SecurityPolicy |
Identifies the user type for password handling. The password for a technical user never expires. |
securityanswer |
The answer the user provided to the security question for logon help. |
securityquestion |
The security question provided by the user for use with logon help, when users are free to write their own questions. |
securityquestionpredefined |
Identifies which of the predefined questions the user selected for use with the logon help, when users cannot write their own question. |
Group
See General Attributes above
Role
See General Attributes above