test

Sun Identity Manager Service Provider 8.1 Deployment

Top-Level Attributes

The following table lists the system defined top-level attributes of the view.

Attribute 

Description 

sys 

An object containing internal system attributes related to the composite object. This is functionally similar to the waveset attribute in the Identity Manager user view, except that there are fewer items that can be modified. Many of the attributes in this object are action attributes, meaning that they are NOT stored, but setting them causes the check-in to perform certain actions.

info 

An object containing metadata about all of the objects linked to the composite object. This is functionally similar to the accountInfo attribute in the Identity Manager User view. This object is read-only.

objects 

An list of objects containing the attributes of accounts linked to the directory user. This is functionally similar to the accounts list in the Identity Manager User view.

display 

An object containing Generic Edit Form state. This is set only if you are using Identity Manager XML forms. 

command 

The command posted to the Generic Edit Form processor. This is set only if you are using Identity Manager XML forms. 

policy 

Policy-related attributes. See policy Attributes for more information.

Unlike the Identity Manager User view, the primary attributes of the composite object will be stored as top-level attributes of the view, rather then nested in waveset or accounts[Lighthouse]. The schema of the composite is variable, though the following attributes will always exist.

Attribute 

Description 

name 

The unique object name. For objects in directories, this is normally the uid not the full DN. For accounts, this is the name that the user would use to login.

password 

The password if this object represents an account. When the view is fetched, this will not have the current password. It may be set by the application to change the password. 

resources 

A list of Resource object names representing the assigned resources. 

applications 

A list of Application object names representing the assigned applications. This is the same as what Identity Manager refers to as “Resource Groups” in the user interface. 

roles 

A list of Role object names representing the assigned roles. 

In addition to the standard attributes, the following attributes will usually be defined in the composite object schema if the object represents a user account.