Password reset-related attributes

Attribute Name (Examples)

Usage

Type

Ldap Connector

Ldap Token

List Persister

Ldap Pwd Self Service

Token Persister

pwdSelfServiceTokenId

The attribute holding the token id. The token is used in the self-service process as additional authentication mean.

String

R

pwdSelfServiceTokenIssuedAt

The date and time when the token was issued. May be empty.

Timestamp

R

pwdSelfServiceTokenConsumed

Flag telling whether the token has been consumed (“used”).

Binary

R

pwdSelfServiceTokenConsumedAt

The date and time when the token has been consumed. May be empty.

Timestamp

R

pwdSelfServiceFailedAttempts

Counts the failed attempts to use the token. May be used to mitigate brute force attacks.

Integer

O

pwdSelfServiceTokenValid

Defines whether the token is valid or not. Invalid tokens cannot be used.

Boolean

O

R

= required by plugin

O

= may be used by plugin