CA Identity Manager: Possible values for Disabled State

book

Article ID: 76864

calendar_today

Updated On:

Products

CA Identity Manager CA Identity Governance CA Identity Portal

Issue/Introduction



What do all of the different values for Disabled State mean in Identity Manager?

Environment

Release:
Component: IDMGR

Resolution

Here is a list of all of the values: 

ENABLED_VALUE 0 (enabled)
MASK_ADMINDISABLED 1 (disabled by an administrator)
MASK_MAXLOGINFAIL 2 (disabled because they reached max login attempts)
MASK_INACTIVITY 4 (disabled due to inactivity)
MASK_PWEXPIRED 8 (disabled due to password expired)
MASK_PWMUSTCHANGE 16777216 (account is NOT disabled but password will be forced to change on next login)

So for example, if your users are have a disabled state of 3:
3 (1+2) = MASK_ADMINDISABLED + MASK_MAXLOGINFAIL => disabled cause of maximum failing attempts reached