Data Stored in the PASSWORDDATA Database Column - Identity Manager

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

This article details the data components managed within the PASSWORDDATA database column of Identity Manager. This column stores encrypted information essential for password policy enforcement and user account state tracking.

Environment

Identity Manager 14.5 & 15

Resolution

The PASSWORDDATA column stores encrypted binary data critical to security policies. The following information is maintained:

1. Password History: Tracks the last 32 password generations.
2. Login Failures: Tracks the count of consecutive failed login attempts.
3. Last Login Timestamp: Stores the time of the most recent successful login.
4. Previous Login Timestamp: Stores the timestamp of the successful login prior to the last one.
5. Disabled/Lock Time: Stores the timestamp when the user account was disabled or locked.
6. Last Password Change Timestamp: Stores the time of the most recent password update.

Note: Data types 1 is variable-length data, while data types 2 through 6 are fixed-length data. The recommended column size for PASSWORDDATA is 4000 bytes (4KB) to accommodate the VARCHAR2 limit.

Additional Information

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.