Configuring 'Last Password Changed Date' in Object Filters

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal

Issue/Introduction

When attempting to filter users by the "Last Password Changed Date" attribute within Object Filters (e.g., in Policy Xpress or Bulk Tasks), standard date-based operators often fail to return expected results.

Environment

• Product: CA Identity Manager
• Release: 14.x

Cause

In CA Identity Manager, the "Last Password Changed Date" attribute is stored as a string rather than a native date object. Furthermore, the attribute follows a specific timestamp format (e.g., YYYY-M-D HH:mm:SS.943000000). Attempting to use an equals operator with a simple date string will fail to match the full timestamp value.

Resolution

To successfully filter users by this attribute, you must use a string-based partial match.

Recommended Filtering Method

Use the starts with operator and provide the date in the format consistent with the attribute's string representation (typically YYYY/MM/DD or YYYY-M-D depending on your environment's locale settings).

Example Configuration:

• Attribute: Last Password Changed Date
• Operator: starts with
• Value: 2025/06/10

If the filter still fails to match records, verify the exact format of the attribute by inspecting a user profile via the User Console. Ensure the value provided in your filter matches the leading characters of the attribute string exactly as it appears in the system.