ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

CA Identity Manager: Possible values for Disabled State


Article ID: 76864


Updated On:


CA Identity Manager CA Identity Governance CA Identity Portal


What do all of the different values for Disabled State mean in Identity Manager?


Component: IDMGR


Here is a list of all of the values: 

ENABLED_VALUE 0 (enabled)
MASK_ADMINDISABLED 1 (disabled by an administrator)
MASK_MAXLOGINFAIL 2 (disabled because they reached max login attempts)
MASK_INACTIVITY 4 (disabled due to inactivity)
MASK_PWEXPIRED 8 (disabled due to password expired)
MASK_PWMUSTCHANGE 16777216 (account is NOT disabled but password will be forced to change on next login)

So for example, if your users are have a disabled state of 3:
3 (1+2) = MASK_ADMINDISABLED + MASK_MAXLOGINFAIL => disabled cause of maximum failing attempts reached