6.2.2.2.2. Password-related Attributes
Attribute Name (Examples)
Usage
Type
Ldap Connector
Ldap Token
List Persister
Ldap Pwd Self Service
Token Persister
userPassword
Password attribute. Required for password change and reset.
LDAP password attribute
O
forcePasswordChange
Flag telling whether the used must change the password at the next login. Defaults to false.
Boolean
O
orderPassword
Flag telling whether a new password letter should be generated for this used. Used in batch jobs. Defaults to false.
Boolean
O
orderPasswordUser
User that ordered the password.
String
O
orderPasswordDate
Date/tim that the password was ordered.
Timestamp
O
latestPasswordChangeDate
Date and time of the latest password change by the user. May be empty.
Timestamp
O
nextEnforcedPasswordChangeDate
Date and time when the user must change the password the next time. May be empty.
Timestamp
O
passwordGenerationDate
Date and time of the latest password generation by a Airlock IAM batch job or by the administrator.
Timestamp
O
passwordDeliveryDate
Date and time of the latest delivery of a password. This is e.g. when a password has been sent to a printer. This is usually the same as the generation date.
Timestamp
O
R
= required by plugin
O
= may be used by plugin