Password-related Attributes

Attribute Name (Examples)

Usage

Type

Ldap Connector

Ldap Token

List Persister

Ldap Pwd Self Service

Token Persister

userPassword

Password attribute. Required for password change and reset.

LDAP password attribute

O

forcePasswordChange

Flag telling whether the used must change the password at the next login. Defaults to false.

Boolean

O

orderPassword

Flag telling whether a new password letter should be generated for this used. Used in batch jobs. Defaults to false.

Boolean

O

orderPasswordUser

User that ordered the password.

String

O

orderPasswordDate

Date/tim that the password was ordered.

Timestamp

O

latestPasswordChangeDate

Date and time of the latest password change by the user. May be empty.

Timestamp

O

nextEnforcedPasswordChangeDate

Date and time when the user must change the password the next time. May be empty.

Timestamp

O

passwordGenerationDate

Date and time of the latest password generation by a Airlock IAM batch job or by the administrator.

Timestamp

O

passwordDeliveryDate

Date and time of the latest delivery of a password. This is e.g. when a password has been sent to a printer. This is usually the same as the generation date.

Timestamp

O

R

= required by plugin

O

= may be used by plugin