Configuring the authOrig Attribute for Active Directory Accounts via Policy Xpress

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Identity Suite

Issue/Introduction

This article provides instructions for configuring the authOrig attribute on an Active Directory (AD) account using Policy Xpress. This configuration ensures that the account is restricted to receive emails only from itself.

Environment

dentity Manager

Resolution

To set the authOrig attribute, you must use the correct IAMHandle format. Follow these steps to configure the attribute in your Policy Xpress action:

1. Identify the Distinguished Name (DN) of the target AD account.

2. Construct the attribute value using the IAMHandle format.

3. Apply the following value in the PX action to update the account attribute:

   {"name":"Account=<User_DN>,ADSContainer=Users,EndPoint=ADEndpoint,Namespace=ActiveDirectory,Domain=im,Server=Server"}

Note: Ensure the value includes the brackets as shown above. This formatting also applies if you are setting the value to another user's DN.