Identity Manager Account Attributes

Only available to Administrators defining the resource.

Identity Manager account attributes describe the default user attributes supported for the resource.

With an Active Sync-enabled adapter, account attributes are the attributes that are available to update the Identity Manager user account. The Active Sync-enabled adapter collects these attributes and stores them in the global area for the input form.

Identity Manager supports the following types of account attributes:

• string

• integer

• boolean

• encrypted

• binary

Binary attributes include graphic files, audio files, or certificates. Not all adapters support binary account attributes. Generally, only certain directory, flat file, and database adapters can process binary attributes.

• Consult the “Account Attributes” section of the adapter documentation to determine if your adapter supports binary attributes.

• Keep the size of any file referenced in a binary attribute as small as possible. For example, loading extremely large graphics files can affect Identity Manager’s performance.

You define Identity Manager account attributes in the AttributeDefinition object of the resource’s schema map, and use the prototypeXML string in the adapter file to map incoming resource attributes to account attributes in Identity Manager. For example, you would map the LDAP sn resource attribute to the lastname attribute in Identity Manager. Identity Manager account attributes include

• accountId

• email

• firstname

• fullname

• lastname

• password