Updated list of codes for %DISABLED_STATE% attribute.

Products

• CA Directory
• CA Identity Manager
• CA Identity Governance
• CA Identity Portal

Issue/Introduction

When integrated with CA Single Sign-on (CA SSO,formerly known as SiteMinder), the %DISABLED_STATE% captures the user account's state so that Password Services handle correctly. There are number of values that could be working together to let CA SSO know how to handle the user's account and the login attempts, whether to allow them, to deny them, to require a password change and so forth.

 

Environment

Release:
Component: IDMGR

Resolution

Solution:

The following list summarizes the %DISABLED_STATE% allowed values and their interpretations:

Field Summary
static int DMSUSER_DISABLED_ADMINDISABLED
Disabled bits to indicate that the user account is disabled by an administrator.
static int DMSUSER_DISABLED_DISABLEDMASK
Disabled bits mask.
static int DMSUSER_DISABLED_ENABLED
Enable the user account.
static int DMSUSER_DISABLED_INACTIVITY
Disabled bits to indicate that the user account is disabled for inactivity over a period of time.
static int DMSUSER_DISABLED_MAXLOGINFAIL
Disabled bits to indicate that the user account is disabled for maximum login failures.
static int DMSUSER_DISABLED_PWEXPIRED
Disabled bits to indicate that the user account is disabled for password expiration.
static int DMSUSER_DISABLED_PWMUSTCHANGE
Disabled bits to indicate that the user will be forced to change his or her password during the next login.

Further,
User is disabled: Sm_Api_DisabledReason_t(attribute inside a structure) can be:
Sm_Api_Disabled_DisabledMask Mask 0x00ffffff
Sm_Api_Disabled_AdminDisabled Bits 0x00000001
Sm_Api_Disabled_MaxLoginFail Bits 0x00000002
Sm_Api_Disabled_Inactivity Bits 0x00000004
Sm_Api_Disabled_PWExpired Bits 0x00000008
Sm_Api_Disabled_DirNativeDisabled Bits 0x000000010

State = Hex = Decimal
--------------------------
Disabled bits to indicate that the user account is disabled by an administrator.
Sm_Api_Disabled_AdminDisabled = 0x00000001 = 1
Sm_Api_Disabled_MaxLoginFail = 0x00000002 = 2
Sm_Api_Disabled_Inactivity = 0x00000004 = 4
Sm_Api_Disabled_PWExpired = 0x00000008 = 8
Sm_Api_Disabled_PWMustChange = 0x01000000 = 16777216
Sm_Api_Disabled_AdminDisabled | Sm_Api_Disabled_PWMustChange = 0x01000001 = 16777217
Sm_Api_Disabled_MaxLoginFail | Sm_Api_Disabled_PWMustChange = 0x01000002 = 16777218
Sm_Api_Disabled_Inactivity | Sm_Api_Disabled_PWMustChange = 0x01000004 = 16777220
Sm_Api_Disabled_PWExpired | Sm_Api_Disabled_PWMustChange = 0x01000008 = 16777224