Documentation
Home
Products
DirX Access DirX Audit DirX Directory DirX Identity
Get Support

DirX Identity

  • General
    • Copyright
    • About this Documentation
    • Notation Conventions
  • Introduction
    • Preface
    • The Challenge of User and Access Management
      • What Is Identity and Access Management?
      • How Does IAM Work?
      • What Is DirX?
    • DirX Identity Overview
      • User Management
      • User Facet: Persona and Functional User Management
      • Role Management
      • Certification Campaigns
      • Request Workflow
      • Self-Service and Delegated Administration
      • Business Object Management
      • Real-Time Provisioning
      • Password Management
      • Policy Management
      • Metadirectory
      • Domain and Target System Management
      • Web and REST Services
      • Audit and Compliance
      • Risk Management
      • Monitoring
      • Scheduled Change Management
      • DirX Identity Components
      • Integration with Service Management Systems
      • Standards Support in DirX Identity
      • DirX Identity Default Applications
      • Deployment
    • Glossary
      • A
      • B
      • C
      • D
      • E
      • F
      • G
      • I
      • M
      • P
      • Q
      • R
      • S
      • T
      • U
      • V
      • W
  • Release Notes
    • Release Notes
      • History of Changes
    • Release Notes DirX Password Reset Client
    • Release Notes Windows Password Listener
  • Tutorial
    • Preface
    • Getting Started
      • Prerequisites
      • Logging In
      • Preparing to Use the Quick Start
      • Working with the Quick Start
      • User Self-Registration
      • Adding a New User
      • Importing Identities
      • Changing the Workflow Configuration
      • Setting up a New Target System
      • Using Password Management
    • Follow-on Tutorials
      • Reusing the Sample Domain
      • Integrating a Customer-Specific Agent
      • Maintaining the Privilege Structure
      • Changing a Workflow’s Structure
      • Applying SoD Policies
      • Re-Approving a Privilege Assignment
      • Certifying a Role
      • Certifying a User
      • Applying Attribute Modification Approval
      • Scheduled Privilege Assignment
      • Creating a Nested Workflow
      • Using Manual Provisioning
      • Working with Internal Tickets
      • Working with Source Tickets
      • Managing Personas
      • Managing Functional Users
      • Using Risk Management
    • About the My-Company Sample Domain
      • Logging In
      • Users
      • Business Objects
      • Privileges
      • Policies
      • Request Workflows
      • Target Systems
      • Auditing
      • Domain Configuration
      • Project Organization
  • Provisioning Administration Guide
    • Preface
    • Managing Provisioning
      • Managing Users
      • Managing User Facets, Personas, and Functional Users
      • Managing Business Objects
      • Managing Tickets
      • Managing Policies
      • Managing Roles, Permissions, and Groups
      • Managing Request Workflows
      • Managing Target Systems
      • Managing Compliance
      • Managing Domains
      • Managing the Provisioning System
      • Managing States
      • Managing Attribute Flow
    • Planning for Provisioning
      • Select the Master Directory or Directories
      • Identify the Target Systems
      • Identify the Roles and Permissions
      • Identify the Target System Groups
      • Identify the Policies
      • Define Request Workflows
      • Decide on Auditing
      • Identify the Administrators
      • Set Up Important Services
      • Decide on Customizations
    • Managing Users
      • User Management Pre-requisites
      • Managing the Users (DirX Identity is Master)
      • Managing the Users (Another Directory is Master)
      • Assigning Roles to Users
      • Assigning Permissions to Users
      • Assigning Groups to Users
      • Working with User Query Folders
      • Working with User States
      • Working with Links at User Entries
    • Managing User Facets
      • Locating User Facets
      • Working with User Facets
      • Working with User Facet States
      • Working with Links at User Facet Entries
      • Working with User Facet Inheritance
      • Maintaining User Facets with DirX Identity Workflows
    • Managing Personas
      • Locating Personas
      • Working with Personas
      • Working with Persona States
      • Working with Links at Persona Entries
    • Managing Functional Users
      • Locating Functional Users
      • Working with Functional Users
      • Working with Functional User States
      • Working with Links at Functional User Entries
    • Managing Business Objects
      • Working with Business Objects
      • About Business Object Types
      • Using Business Objects
    • Managing Tickets
      • Understanding Internal Tickets
      • About Customer-specific Tickets
    • Managing the Privilege Structure
      • Working with Privilege Structure Objects
      • Managing Roles
      • Managing Permissions
      • Managing Groups
      • Working with Privilege Structure Query Folders
      • Managing the Privilege Resolution Process
    • Managing Policies
      • Delegated Administration
      • Managing Automatic Provisioning and Consistency Checking
      • Managing Object Policies
      • Managing SoD Policies
      • Managing Password Policies
    • Managing Request Workflows
      • Managing Configuration Objects
      • Managing Request Workflow Definitions
      • Managing Request Workflow Instances
    • Managing Target Systems
      • Managing Access Rights
      • Working with Target System Objects
      • Adding a Target System
      • Monitoring Account and Account Group Assignments
      • Handling the Results of the Validation Workflow
      • Managing Target System Accounts
      • Managing Target System Groups
      • Deleting a Target System
    • Managing Compliance
      • Managing Segregation of Duties (SoD)
      • Managing Risk
      • Managing Certification Campaigns
      • Managing the Audit Trail
      • Managing Status Reports
    • Managing Domains
      • Configuring a Domain
      • Using Object Collections
      • Monitoring the Workflows
    • Managing the Provisioning System
      • Logging in to DirX Identity Manager
      • Setting LDAP Client Limits
      • Managing Consistency
      • Monitoring DirX Identity Provision
      • Tuning the Provisioning System
    • Context-Sensitive Help
      • Users View
      • Business Objects View
      • Ticket View
      • Privileges View
      • Policies View
      • Certification Campaign View
      • Request Workflows View
      • Target Systems View
      • Auditing View
      • Domain Configuration View
      • Miscellaneous
  • Connectivity Administration Guide
    • Preface
    • Managing DirX Identity Connectivity
      • Managing Connected Directories
      • Managing Provisioning Workflows
      • Managing Passwords
      • Managing DirX Identity Servers
      • Managing the Connectivity System
      • About Java-based Configuration Objects
      • About Tcl-based Configuration Objects
    • Planning for DirX Identity Connectivity
      • Identify the Source Systems
      • Decide on Source System Workflows
      • Identify the Target Systems
      • Decide on Target System Workflows
      • Decide on Password Synchronization
      • Define the System Architecture
      • Define System Maintenance
    • Managing Connected Directories
      • Setting Up the Connected Directory Structure
      • Setting Up Connected Directory Authentication Information
      • Schema and Attribute Configuration Handling
    • Managing Provisioning Workflows
      • Managing Java-based Provisioning Workflows
      • Managing Tcl-based Provisioning Workflows
    • Managing Passwords
      • Understanding Password Management
      • Password Changes from Windows Domains
      • Password Changes from Web Applications
      • Configuring the Password Synchronization Workflows
      • Understanding Password Synchronization Workflow Operations
      • About the Password Change Algorithms
    • Managing DirX Identity Servers
      • Managing the Message Broker
      • Managing the Java-based Server
      • Managing the C-based Server
      • Distributed Deployments and Scalability
      • High Availability and Recovery
      • Diagnostic Information
      • Managing Daylight Savings Time
      • Connector Frameworks
    • Managing the Connectivity System
      • Managing Administrative Accounts
      • Managing Connectivity Security
      • Establishing Secure Connections with SSL
      • Understanding File Handling Mechanisms
    • Context-Sensitive Help
    • Mapping Functions
  • User Interfaces Guide
    • Preface
    • Using DirX Identity Web Center
      • Configuring Web Center
      • About the Web Center Page Layout
      • Logging In to Web Center
      • Logging Out of Web Center
      • Displaying the Help File
      • Using the Self-Service Menu
      • Using the Old Delegation Menu
      • Using the New Delegation Menu
      • Using the Work List Menu
      • Using the Users Menu (User Management)
      • Using the Roles Menu (Role Management)
      • Using the Permissions Menu (Permission Management)
      • Using the Groups Menu (Group Management)
      • Using the Accounts Menu (Account Management)
      • Using the Rules Menu (Rule Management)
      • Using the Certifications Menu
      • Using the Tools Menu
      • Managing Business Objects
      • Using the Details Pages
    • Using DirX Identity Web Center for Password Management
      • Configuring Web Center for Password Management
      • Logging In to Web Center for Password Management
      • About the Web Center for Password Management Layout
      • Logging Out of Web Center for Password Management
      • Using the Password Self-Service Menu
      • Using the Password Service Desk Menu
    • Using DirX Identity Manager
      • Logging In
      • Using the Main Window
      • Supplying Date and Time
      • Managing Your Configuration Database
      • Handling Erroneous Field Content
      • Using Wizards
      • Provisioning Views
      • Connectivity Views
      • Data View
      • Customizing DirX Identity Manager
      • Troubleshooting
    • Using DirX Identity Web Admin
      • Logging In (Web Admin)
      • About the Web Admin Page Layout
      • Using the C++-Based Server Menu
      • Managing the Java-Based Server
      • Monitoring a Java-Based Server with a JMX Application
      • Exposed MBeans for JMX Applications
    • Using DirX Identity Utilities
      • Transporting Data
      • Using the Link Checker
      • Using the Log Analyzer
      • Using the Log Merger
      • Using the Log Viewer
      • Using the Run Workflow Tool
      • Using the Run Report Tool
    • Deprecated Features
      • Deprecated Export Features
  • Application Development Guide
    • Preface
    • Understanding the Default Application Workflow Technology
      • Understanding Request Workflows
      • Understanding Java-based Workflows
      • Understanding Tcl-based Workflows
    • Using Request Workflows
      • Understanding Creation Workflows
      • Understanding Modification Workflows
      • Understanding Assignment Workflows
      • Understanding Deletion Workflows
      • Understanding Certification Workflows
      • Understanding Service Management Workflows
    • Configuring Custom Scenarios
      • Creating the New Scenario
      • Refining the Scenario
      • Creating the Identity Creation Workflows
      • Creating Cluster Target Systems
    • Using the Default Connectivity Applications
      • Working with Default Connectivity Application Objects
      • Working with the Default Connectivity Scenario
    • Using the Source Workflows
      • Understanding the Java-based Source Workflows
      • Understanding the Tcl-based Source Workflows
    • Using the Maintenance Workflows
      • Understanding the Java-based Maintenance Workflows
      • Understanding the Tcl-based Maintenance Workflows
    • Using the Target System (Provisioning) Workflows
      • Understanding Java-based Target System Workflows
      • Understanding Tcl-based Target System Workflows
    • Deprecated Features
      • ADS Provisioning Workflows
      • Dashboard Workflow
      • DirX Access Workflows
      • JDBC Provisioning Workflows
      • LDAP Provisioning Workflows
      • LDAP XXL Provisioning Workflows
      • Lotus Notes Provisioning Workflows
      • UNIX PAM Provisioning Workflows
      • UNIX PAM Workflows
      • TCL HiPath Workflows
      • TCL ODBC Workflows
      • TCL SiPass Workflows
      • Imprivata Workflows
  • Workflow Reference
    • Workflow Reference Overview
    • ESSO Provisioning
      • Ident_ESSOExtranetPortal_Realtime
    • Identity Store
      • CampaignGeneration
      • CertificationCampaignController
      • CheckConsistency
      • CleanupObjects
      • CombinedMaintenance
      • ConsistencyCheck
      • CreateFunctionalUsersForUnassignedAccounts
      • CreatePersonasForNonPrimaryAccounts
      • CreateUsersForUnassignedAccounts
      • EventBasedAccountProcessing
      • EventBasedContextProcessing
      • EventBasedCostUnitProcessing
      • EventBasedFunctionalUserResolution
      • EventBasedLocationProcessing
      • EventBasedOrganizationProcessing
      • EventBasedOUProcessing
      • EventBasedPersonaResolution
      • EventBasedProjectProcessing
      • EventBasedUserResolution
      • ExtractAuditTrail
      • FullSODCheck
      • GenericEventBasedProcessing
      • Ident2Report
      • InitializeReapproval
      • MarkAffectedUsers
      • PolicyExecution
      • PrivilegeResolution
      • Process Internal Tickets
      • ReportGeneration
      • ResolveInconsistentGroupMembership
      • RiskGvnController
      • RunWFexternally
      • StartReapprovalWorkflows
      • UidConsistencyCheckController
      • UserResolution
    • Ldap2Fs
      • Export Connectivity to FileSystem
      • Export Provisioning to FileSystem
      • Import Connectivity to FileSystem
      • Import Provisioning to FileSystem
    • Password Synchronization
      • AccountPasswordManager
      • ResetAccountPasswords
      • ResetPasswordIfDisplayed
      • UserPasswordEventManager
      • UserPasswordExpirationNotification
    • Source Realtime
      • Import Users from ADS
      • Export Users to CSV
      • Import Users from CSV
      • Full Import of external LDAP Users
      • Import Users from external LDAP
      • Import Roles from database
      • Import Users from Database
      • Export Users to LDIF
      • Import Users from LDIF
    • Source Scheduled
      • CSVfile2Ident
      • Ident2CSVfile
      • Ident2JDBC
      • JDBC2Ident
      • CorpDir2Ident
      • DirXLDIF2Ident
      • Ident2LDIFfile
      • LDIFfile2CSVfile
      • LDIFfile2Ident
      • ODBC2Ident+Maintenance
      • Ident2ODBC
      • ODBC_Ident
      • ODBC2Ident
      • SAP-R3-HR2Ident
      • SAP-R3-OM2Ident
      • DSMLfile2Ident
      • Ident2DSMLfile
      • Ident2XMLfile
      • Ident2XSLT
      • XMLfile2Ident
    • Target Realtime
      • ADS_Ident_Realtime_Delta
      • Ident_ADS_Realtime
      • Restore_ADS_Realtime
      • SetPassword in ADS
      • Validate_ADS_Realtime
      • Ident_BW_Realtime
      • Validate_BW_Realtime
      • Ident_ShareFile_Realtime
      • Validate_ShareFile_Realtime
      • Sync_Domino_Realtime
      • Validate_Domino_Realtime
      • Ident_EntraID_Realtime
      • SetPassword in EntraID
      • Validate_EntraID_Realtime
      • Ident_GoogleApps_Realtime
      • SetPassword in Google Apps
      • Validate_GoogleApps_Realtime
      • Ident_Imprivata_Realtime
      • Ident_ImprivataExtranetPortal_Realtime
      • SetPassword in Imprivata
      • SetPassword in ImprivataExtranetPortal
      • Ident_JDBC_Realtime
      • SetPassword in JDBC
      • Validate_JDBC_Realtime
      • Ident_LDAP_Realtime
      • Ident_LDAP_Realtime_Clustered
      • LDAP_Ident_Realtime_Delta
      • Restore_LDAP_Realtime
      • SetPassword in LDAP
      • Validate_LDAP_Realtime
      • Email Notification handling
      • EventBased Email Notification Handling
      • Send Emails
      • Ident_Medico_Realtime
      • SetPassword
      • Validate_Medico_Realtime
      • Ident_Notes_Realtime
      • Restore_Notes_Realtime
      • SetPassword in Notes
      • Validate_Notes_Realtime
      • Ident_RACF_Realtime
      • SetPassword in RACF
      • Validate_RACF_Realtime
      • Ident_Salesforce_Realtime
      • Ident_Salesforce_SLSFAccounts_Realtime
      • Ident_Salesforce_SLSFContacts_Realtime
      • SetPassword in Salesforce
      • Validate_Salesforce_Realtime
      • Ident_SAP-IdD_Realtime
      • Validate_SAP-IdD_Realtime
      • Ident_SAPR3UM_Realtime
      • SetPassword in SAPR3UM
      • Validate_SAPR3UM_Realtime
      • Ident_SCIMv2_Realtime
      • Validate_SCIMv2_Realtime
      • Ident_SvcMgmt_Realtime
      • Ident_SharePoint_Realtime_Clustered
      • Validate_SharePoint_Ident_Clustered
      • Ident_SIPORT_Realtime
      • Validate_SIPORT_Realtime
      • Ident_UnifyOffice_Realtime
      • Validate_UnifyOffice_Realtime
      • Ident_UNIX-OICF_Realtime
      • SetPassword in UNIX-OICF
      • Validate_UNIX-OICF_Realtime
      • Ident_WinLA-OICF_Realtime
      • SetPassword in WinLA-OICF
      • Validate_WinLA-OICF_Realtime
    • Target Scheduled
      • ADS2Ident_Validation
      • Ident_ADS_Sync
      • Ident_HiPath
      • Ident_JDBC_Sync
      • Ident2JDBC_SyncAccountDel
      • Ident2JDBC_SyncGroupDel
      • JDBC2Ident_Sync_NewAcc
      • JDBC2Ident_Sync_NewGroup
      • JDBC2Ident_Validation
      • Ident_LDAP_Sync
      • Ident2LDAPdir_File
      • LDAP2Ident_Validation
      • Ident_LDAPXXL_Sync
      • LDAPXXL2Ident_Validation
      • Ident_NDS_Sync
      • NDS2Ident_Validation
      • Ident_Notes_Sync
      • Notes2Ident_Validation
      • Ident_ODBC_Sync
      • Ident2ODBC_SyncAccountDel
      • Ident2ODBC_SyncGroupDel
      • ODBC2Ident_Sync_NewAcc
      • ODBC2Ident_Sync_NewGroup
      • ODBC2Ident_Validation
      • Ident_RACF_Sync
      • RACF2Ident_Validation
      • Ident_SAPEPUM_Sync
      • SAPEPUM2Ident_Validation
      • Ident_SAPR3UM_Sync
      • SAPR3UM2Ident_Validation
      • Ident_SiPass_Sync
      • SiPass2Ident_Validation
    • Transport
      • Export Connectivity Collections
      • Export Provisioning Collections
      • Import Connectivity Collections
      • Import Provisioning Collections
      • Joint Backup
  • Customization Guide
    • Preface
    • Customizing DirX Identity
    • Customizing Objects
      • Object Description Format
      • Customizing Provisioning Objects
      • Customizing Connectivity Objects
      • Creating Component Descriptions
    • Customizing Policies
      • Customizing Access Policies
    • Customizing Object References
      • References for Java-based Workflows
      • References for Tcl-based Workflows
    • Customizing Parameters
      • Creating a New Proposal List
      • Adding a New Permission Parameter
      • Adding a New Role Parameter
      • Adding Dependent Proposal Lists
    • Customizing the Provisioning Tree View
      • Changing the Provisioning Object Tree
      • Changing the Display Name of Entries in the Tree View
    • Customizing Wizards
      • Customizing the Provisioning Target System Wizard
      • Customizing a Connectivity Wizard
    • Customizing Target Systems
      • Configuring a Target System
      • Defining Default Values for Account Creation
      • Customizing the Default Target Systems
      • Handling Attribute-based Access Rights
      • Using JavaScript in Obligations
      • Handling Multi-Value Properties in Obligations
      • Inheriting Account Attributes from the User
      • Managing Target System Accounts and Group Name Spaces
      • Setting Group Member Limits
      • Specifying Unique Account Attributes
      • Specifying Unique Account Naming Attributes
      • Creating Accounts in a Subtree
      • Defining Attributes that Hold Certificates
    • Customizing Auditing
      • Creating a Query Folder
      • Customizing Audit Policies
      • Customizing the Certificate Owner Check
      • Customizing Status Reports
    • Customizing Program Logic
      • Using JavaScript Files
      • Writing Java Extensions
      • Customizing User Creation Workflows
      • Customizing the Consistency Rules for Automatic Creation
      • Customizing the JavaScript for Persona and User Exchange
    • Customizing Password Management
      • Customizing the Password Checker and Generator
      • Configuring the Global Password Policy for Access Locking
    • Customizing Certification Campaigns
      • Customizing Certification Campaigns with User Hooks
    • Deprecated Features
      • Customizing Property Page Descriptions
  • Integration Framework
    • Preface
    • Connector Integration Framework
      • Java Connector Integration Framework
      • C/C++ Connector Integration Framework
    • Agent Integration Framework
    • DirX Identity Web Application Programming Interface
    • SPML Provisioning Web Services
      • About the Provisioning Operations
      • Authentication
      • Authorization
      • Runtime Operation
      • Common SPML Aspects
      • User Management
      • Role Management
      • Permission Management
      • Business Objects Management
      • Creating and Deleting Target Systems
      • Accounts Management
      • One Time Password
      • Groups Management
      • Custom Objects
      • User Hooks
      • Using the Sample Client
    • Workflow Management Web Services
      • Operations
      • Implementing a Client
      • Authentication
      • Common Parameters
  • WebCenter Reference
    • Preface
    • Installed Files
      • API Samples and Documentation
      • Configuration Wizard Files
      • Context Descriptors
      • Web Application Files
    • Web Application Characteristics
      • Tomcat and Java Versions
      • Installed Files in the Tomcat Folder
      • Tomcat Configuration
      • Running Tomcat Behind a Proxy or Load Balancer
      • Deploying Web Center on a Remote Server
      • Hints on Tomcat
      • Peculiarities and Restrictions
      • Socket Connections
    • Web Center Architecture
      • Software Components
      • Typical Request Flow
      • A Sample: List Users
    • Web Center Configuration
      • Context Descriptor Files
      • Deployment Descriptor web.xml
      • The password.properties File
      • High-Level Configuration Files
    • User Interface Configuration
      • Struts Configuration struts-config.xml
      • Tiles Definitions tiles-defs.xml
      • Menu Configuration menu-defs.xml
      • Forms Configuration forms-config.xml
      • Converter Definitions converters.properties
      • Renderers Configuration
      • Object Configuration objects-config.xml
      • Search Filter Configuration
      • Validators
    • Identity API
      • Interface Summary
      • Basic Concepts
      • Special Aspects
      • How Web Center Uses the API
      • Using the API in a Standalone Application
      • Sample Application UserSample.java
    • Utility Classes
      • ActionUtils.java
      • DataUtils.java
      • DirectoryEntryBean
      • DNUtilities
      • Message
      • FilterUtilities
    • Web Center Tag Library
      • Certification Tags
      • Controller Tags
      • Expression Tags
      • View Tags
      • Workflow Tags
      • DirXWeb for JSP Tags
    • Security
      • Securing Session IDs
      • Preventing Session Fixation
      • Preventing CSRF Attacks
      • Preventing Clickjacking Attacks
      • Disabling Potentially Risky HTTP Methods
      • Configuring Cross-Origin Requests
      • Input Validation
      • Error Pages
      • Login Configuration
      • Restricting Access to the password File
      • Self-Registrations and User ANYONE
      • Securing Connections
      • Disabling Development Tools
      • Output Escaping
      • Document Root Folder
      • Securing Tomcat
    • Setting up Single Sign-On to the Request Workflow Server
      • Creating a Keystore and a Truststore
      • Samples
      • Logging
    • Useful Links
  • WebCenter Customization Guide
    • Preface
    • Getting Started
      • Deploying WebCenter
      • Preparing the Development Environment
    • Customization Files
      • Properties Files
      • Message Texts
      • Objects Configuration
      • Renderers
      • Including Custom JavaScript Files and Stylesheets
      • JavaScript
      • Custom File Overview
      • Configuring Customization File Names
    • Customization Examples
      • Changing the JSP Page Layout
      • Adding Languages
      • Changing Attribute Lists in Pages
      • Removing Parts of the Default Application
      • Integrating Management of a New Object Type
    • Renderers
      • Overview
      • Custom File Overview
      • Customizing Renderers
      • Creating a New Renderer
      • Extending Existing Renderers
      • Assigning Renderers to Properties
      • Renderer Samples
    • Validation
      • Overview
      • Validators
      • Validation Renderers
      • Assigning Renderers to Properties
      • Customization Hints
      • Validator Samples
    • Photos and Certificates
      • Prerequisites
      • Renderers
      • Java Renderer Classes
      • Configuration in web.xml
      • Approving Photos and Certificates
    • DN Representation
      • Overview
      • Configuration
      • Individual DN Representations
    • Attribute Modification Approval
      • Overview
      • Form Configuration
      • Restrictions
      • Notes
    • Localizing Properties with a Finite Number of Values
    • Customizing the Overall Page Layout
      • Files
      • Layout Properties
      • Customizing the Layout – Step by Step
    • Web Center Menus
      • Menu Overview
    • Form and List Frames
      • Overview
      • Titles
      • Toolbars
      • Page Size Selectors
      • Global Options
    • Language and Font Size Chooser
      • Language Chooser
      • Font Size Chooser
      • Removing Both Choosers
      • Reset Points
    • Utility Bar
      • Utility Bar Definition
      • Navigation History
      • Quick Search
      • Advanced Search
      • Global Options
    • Home Page
      • Defining the Home Menu
      • Displaying the Home Page after Login
      • Defining the Home Action
      • Defining the Home Page
      • Property Plug-ins
      • List Plug-ins
    • Sorting Lists
      • Sort Attributes
      • Sort Attribute Evaluation
      • Samples
    • Expression Language Extensions
      • Defining Functions
      • Assigning the Functions to a Scoped Variable
      • Using the Functions
    • Accessibility
      • Labels
      • ARIA Roles
      • Read-Only Fields in Tab Order
      • Editable Date Fields
      • Table Summaries
    • Using the Keyboard
      • Fully Accessible User Interface Controls
      • Other User Interface Controls
    • Search Panel Configuration
      • Filter Attributes
    • Adding Languages
      • Overview
      • Translating Files
      • Configuration Tasks
    • Confirmations
      • Overview
      • Condition Check Functions
      • Form Property Configuration
    • Validation of Editable Input Fields in Tables
      • Overview
      • Samples
      • Configuration
    • Customizing the Help Link in the Menu Bar
      • Overview
      • Customizing the Help Button in the Menu Definition
      • Providing the Help Files
      • Customizing the Help Window
    • Rendering Attribute Values via Icons
      • Overview
      • Attribute Risk Level
      • Displaying the Risk Level in WebCenter
      • Configuring WebCenter
    • Enabling User Self-Registration
      • Overview
      • Enable Self-Registration Section on Login Page
      • Activate the Self-Registration Actions
      • Set the Self-Registration Password
  • Meta Controller Reference
    • Preface
    • DirX Identity Commands
      • metacp
        • ats (metacp)
        • ldapargs (metacp)
        • meta (metacp)
        • obj (metacp)
        • util (metacp)
      • metacpdump
      • metahubdump
    • Attribute Configuration File Format
      • Attribute Definition Fields
      • Global Information Fields
    • Directory Data File Formats
      • Tagged Data File Format
      • Untagged Data File Format
      • LDIF Format
      • Extensible Markup Language (XML) Format
    • ChangeLog Data Handling
      • DIRX Changelog Format
      • iPlanet and OID Formats
    • String Representation for LDAP Binds
      • Simple and Structured Attributes
      • Distinguished Names
      • Search Filters
      • Reserved Attribute Characters
      • Attribute Syntax
      • String Representations for Simple Attribute Syntaxes
      • String Representations for Structured Attribute Syntaxes
    • DirX Identity Program Files
      • Logging Configuration Files for Meta Controller
      • Directory Client Configuration File
      • SSL/TLS Certificate Database
      • SSL/TLS Key Database
      • IDMS Configuration and Key Material Files
    • DirX Identity Environment Variables
    • Directory Synchronization Templates
      • Import from an LDIF Content File
      • Export to an LDIF Content File
    • Data Format Handling Procedures
      • Handling XML Files
      • Handling Changelogs
    • Country Codes
    • Code Conversion
      • Basic Usage
      • Expert Usage
      • Tcl Features
      • Character Sets
  • Connectivity Reference
    • Preface
    • DirX Identity Connectivity Overview
    • Identity Connectors
      • ADS Connector
      • Citrix Share File Connector
      • CSV Connector
      • Evidian ESSO Connector
      • Google Apps Connector
      • Identity Domain Connector
      • JDBC Connector
      • LDAP Connector
      • LDIF Connector
      • IBM Notes Connector
      • HCL Domino REST API Connector
      • Mail Connector
      • Microsoft Entra ID Connector
      • OpenICF Connector
      • OpenICF Windows Local Accounts Connector
      • RACF Connector
      • Remote AD Connector
      • Request Workflow Connector
      • Salesforce Connector
      • SAP ECC UM Connector
      • SharePoint Connector
      • SPMLv1 Connector
      • SPMLV1ToV2 Connector
      • Unify Office Connector
      • SCIM Connector
    • Identity Agents
      • Identity Agent Architecture
      • Framework-based Agents
      • Non Framework-based Agents
      • JDBC Agent
      • IBM Notes Agent
      • Microsoft ADS Agent
      • Microsoft Exchange Agent
      • ODBC Agent
      • SAP ERP HR Agent
      • SAP ECC UM Agent
      • SAP NetWeaver UM Agent
      • SiPass Agent
    • Event Listeners and Triggers
      • Microsoft Windows Password Listener
      • Web Event Trigger
    • Deprecated Features
      • Imprivata One Sign Connector
  • Troubleshooting Guide
    • Preface
    • Introduction
      • General Remarks
      • Avoiding Problems
      • Following Problem-Solving Guidelines
      • Opening Tickets
      • Getting Logging Message Information
    • Guidelines for Specific Components
      • Analyzing Global Aspects
      • Analyzing Installation and Configuration Problems
      • Analyzing Manager Problems
      • Analyzing Object Description Problems
      • Analyzing Web Center Problems
      • Analyzing Policy Problems
      • Analyzing Services Problems
      • Analyzing C++-Based Server Problems
      • Analyzing Java-Based Server Problems
      • Analyzing Java-Based Workflow Problems
      • Analyzing Tcl-Based Workflow Problems
      • Analyzing Request Workflow Problems
      • Using LDAP Session Tracking to Analyze Component Problems
    • Installation / Configuration Problems
      • Installation Problems
      • Configuration Problems
      • Schema Installation Problems
      • Uninstall and Unconfiguration Problems
      • Update and Upgrade Installation Problems
    • Problems with Provisioning
      • Approval Does Not Work
      • Changed Rules for Attributes
      • Consistency Check Workflow Is Aborted Due to OutOfMemoryError
      • Enabling Deleted Users
      • Incorrect Approval Behavior
      • Incorrect Privilege Resolution
      • Invalid Query Reference
      • Old Values in Membership Attributes
      • Web Center or Java-Based Server Not Working Correctly
      • Cleanup Rule for Imported SharePoint Group Members
      • Inconsistent Group Membership
    • Problems with Connectivity
      • General Problems
      • Java-Based Workflow Problems
      • Tcl-Based Workflow Problems
      • Windows Password Listener Problems
    • Problems with DirX Identity Manager
      • General Issues
      • Monitor View
      • Connectivity View
      • Provisioning View
      • Workflow Runtime Window
    • Problems with Web Applications
      • Access to an Application Fails with HTTP Status 404
    • Problems with Web Center
      • Broken Pages After Session Upgrade
      • Broken Pages Due to Missing X Display Server
      • CAPICOM Error Message with Enabled Client Signature
      • Change/Reset Password Failure
      • Display Privileged Account Password Failure
      • Error Messages When Approving Request Workflow Tasks
      • Incorrect Login Link
      • Login Fails for Any User
      • Login Fails for a Specific User
      • Request Workflow Access Failure
      • Request Workflow Access Failure in Case of Single Sign-On
      • Session Timeout
      • Size Limit Exceeded
      • Too Many Sessions
      • Wrong Role Parameter Display
    • Problems with Web Admin
      • No Connection to Java-Based Identity Server
      • Node for C++-Based Identity Server Is Not Displayed
    • Problems with Web Services (SOA)
      • Exception NoClassDefFoundError When Running Web Service Clients
      • Memory Problems with Web Services
    • Problems with Request Workflows
      • Request Workflow Uses the Wrong Initiator
    • Problems with Identity Services
      • Starting and Stopping Services
      • Warnings Due to Missing Definitions Within Object Descriptions
      • C++-Based Identity Server Errors
      • Java-Based Identity Server Errors
    • Problems with LDAP Servers
      • "No Such Attribute or Value" Error
      • Service Does Not Operate Properly After Directory Restore
      • "Unwilling to Perform" Error
      • DirX Directory
    • Problems with Utilities
      • Locale Dependency Problem with logant
      • Run Workflow Tool Hangs
      • dirxgenpse Cannot Contact LDAP Server
    • Problems in Complex Scenarios
      • Password Synchronization
    • Logging Messages
      • Logging Messages for the C++-Based Server Components
      • Logging Messages for the Common Java Components
      • Logging Messages for the Connectivity Components
      • Logging Messages for High Availability
      • Logging Messages for the Java-Based Server Components
      • Logging Messages for the DirX Identity Manager
      • Logging Messages for the DirX Identity Services
  • Installation Guide
    • Preface
    • Quick Upgrade Guide
    • Introduction for Advanced Installation and Configuration
      • General Information
    • Installation on a Single Machine
    • Installing DirX Identity
      • Installation
      • Update / Upgrade Installation
      • Installation Modes
        • Graphical User Interface (GUI) Mode
        • Console Mode
        • Silent Mode
      • Installation Steps
      • Installation Properties
      • Configurable Content
      • Environment Variable Settings
      • Uninstallation
      • Additional Instructions for Linux
    • Configuring DirX Identity
      • Configuration Wizard
      • Deployment Tool
        • Architecture Files
      • LDAP2FS Tool
      • Integrating Start/Stop Scripts into the Linux Operating System
      • Silent Mode
    • Configuring Single Components
      • Hints for Installing the DirX Directory Server
      • Hints for Configuring the Tomcat Server
      • Configuring Connectivity, Schema, and Data
      • Configuring Provisioning Schema and Data
      • Message Broker
      • C++-Based Identity Server
      • Java-based Identity Server
      • DirX Identity Manager
      • DirX Identity Web Center
      • Business User Interface
      • DirX Identity Connectivity Packages - Agents
      • DirX Identity Connectivity Packages - Connectors
    • Other Installation Configurations
      • Distributed Installation
      • Password Management Including Specialized Web Center
      • Configurations Using DirX Identity High Availability Features
    • Installing the Windows Password Listener
      • Installing the Windows Password Listener
      • Unattended Silent Installation/Uninstallation
    • Installing the JMS-Audit Handler
      • Deploying the JMS Audit Handler
      • Configuring the JMS Audit Handler
    • The Java for DirX Identity
      • Requirements Regarding the Java for DirX Identity
      • Security Updates for the Java for DirX Identity
    • Additional Topics
      • Disk Space Calculation
      • Schema and Content Handling
    • DirX Identity Web Center - Kerberos Authentication
      • Introduction
      • Windows Prerequisites
      • Tomcat Configuration
      • Web Center Configuration
      • Browser Settings
      • Testing
      • Logging and Debugging
      • Links
  • Migration Guide
    • Preface
    • Introduction
      • Migration from Versions older than V8.3
      • Migration from Versions older than V8.7
      • Manual Migration Overview
      • Features to be Migrated
    • Migration Procedure
    • Preparing the Migration
      • Preserving Files
    • Automatic Migration during Installation and Configuration
    • Manual Migration
      • General Aspects
      • Aspects Relevant to Using DirX Directory V8.6 or Higher
      • Aspects Relevant to DirX Identity 9.0
    • Known Issues
      • Overwritten cert8.db File During Update Installation
      • Overwritten Agent Batch Files During Update Installation
      • Deletion of Old Objects
  • Business User Interface Configuration Guide
    • Preface
    • Installing and Configuring the DirX Identity Business User Interface
      • Installing the Business User Interface
      • Deploying the Business User Interface
      • Updating the Business User Interface with a Service Pack
      • Configuring and Customizing the Business User Interface
    • Configure the DirX Identity Business User Interface with DirX Access Policy Enforcement (PEP)
    • Configure the DirX Identity Business User Interface with OAuth2 (OIDC/PKCE)
    • Configure OAuth2 for DirX Identity Business User Interface and REST Service with Red Hat Keycloak IdP
  • Business User Interface User Guide
    • Preface
    • Using the DirX Identity Business User Interface
      • Accessing the Business User Interface
      • Logging in to the Business User Interface
      • The Home Page
      • The Navigation Menu
      • My Profile
      • My Identities
      • My Tasks
      • My Access Rights
      • My Requests
      • My Team
      • My Delegations
      • Change Password
      • Certification Campaigns
      • User Management
      • Login Information Dialog
  • Identity REST Service
    • Preface
    • DirX Identity REST Services
      • Overview of Installed Files
      • Deploying the REST Services into Tomcat
      • Testing the REST Services
      • Socket Connections
      • Configuring the DirX Identity REST Services
      • Objects and Attributes
      • REST Services Operations
      • Assigning Roles with Parameters
      • References
    • DirX Identity REST Services - Kerberos Authentication
      • Introduction
      • Windows Prerequisites
      • Tomcat Configuration
      • REST Services Configuration
      • Browser Settings
      • Testing
      • Logging and Debugging
      • Links
    • Open API Reference
  • DirX Password Reset Client - User Interface Guide
    • Preface
    • DirX Password Reset Client - User Interface
    • Password Reset Procedure
      • Multiple Options
      • Smart Card Option
      • Authentication Questions Option
      • Mobile OTP Option
      • Set New Password Step
      • Get Status Step
  • DirX Password Reset Client - Installation and Configuration
    • Preface
    • DirX Password Reset Client - Installation and Configuration
      • DPRC Installation
      • Implementation Details
      • DPRS Configuration
    • Use Cases
      • Certification Campaign
        • Preface
        • Overview
        • Preparing for a Certification Campaign
        • Creating a Certification Campaign
        • Starting a Certification Campaign
        • Monitoring and Finishing a Campaign
        • Customizing with User Hooks
        • Generating Certification Campaign Reports
        • Continuous Certification by Re-Approval
        • Scheduled Certification by Re-Approval
        • Hints and Limitations
      • Creating a Custom Target System Type
        • Preface
        • Overview
        • Defining a Custom Target System Instance
        • Defining a Custom Target System Template
        • Creating Java-based Provisioning Workflows
        • Transferring Custom Target System Templates
      • High Availability
        • Preface
        • Overview
        • Installation and Configuration
        • Configuration
        • Supervisor Customization
        • Switching between Active and Passive Configurations
      • Jaspersoft Reports
        • Overview
        • Templates and Input Files
        • Developing Reports
        • Upgrading from V8.9
        • Helpful Resources
      • Java Programming in DirX Identity
        • Preface
        • Overview
        • Using the Programming Environment
        • Extending Provisioning Workflows
        • Extending Password Synchronization Workflows
        • Extending Event-based Processing Workflows
        • Extending Request Workflows
        • Extending Web Services
        • Implementing Consistency Rules
        • Implementing a Custom Connector (General)
        • Implementing a RESTful Connector
        • Using the User LDAP Lock
      • Monitoring DirX Identity Servers with Nagios
        • Overview
        • Configuration
      • Password Management
        • Overview
        • Configuration
      • Real-time Synchronization within an Identity Domain
        • Preface
        • Overview
        • Requirements
        • Differences from Conventional Workflows
        • Creating the Workflow
      • Service Management
        • Preface
        • Overview
        • Service Management as a Source
        • Internal Service Management
        • Manual Provisioning of Offline Systems
      • Enabling Smart Card Login for DirX Identity Manager
        • Preface
        • Overview
        • Configuring the Recommended Scenario
        • Configuring the Alternate Scenario
        • Creating a Personalized DomainAdmin
      • Configuring the Maintenance Workflows for User Facets
        • Preface
        • Overview
        • Use Cases
      • Configuring User-specific Proposal Lists for Role Parameters
        • Preface
        • Overview
        • Use Case
      • Using Domains
        • Preface
        • Overview
        • Background Information
        • Single Domain
        • Multiple Provisioning Domains / Common Connectivity Domain
        • Multiple Provisioning Domains / Separate Connectivity Domains
        • Multiple Tenants / Single Provisioning Domain
        • Use Case Deployment Quick Reference
      • Using Segregation of Duties
        • Preface
        • Overview
        • Using DirX Identity SoD Policies
      • Web Center File Upload
        • Preface
        • Overview
        • User Interface
        • Configuration
  • Resolution service User Guide
    • Preface
    • Resolution Service
    • Setting Up the Resolution Service as a Windows Service
    • Setting up the Resolution Service as a Linux Daemon
    • Configuring the application.properties File
    • Configuring SLF4J Logging
    • Configuring Log Levels
    • Log File Management and Archiving
    • Management Endpoints
    • JMX Monitoring
    • Disabling the Resolution Adapter for Standalone Use
    • Verifying the Consumer in ActiveMQ
    • Handling Port Conflicts
DirX Identity 9.0.3-pre
  • DirX
  • DirX Access
    • 9.1
  • DirX Audit
    • 9.1
    • 7.2
  • DirX Directory
    • 10.0
    • 9.1
  • DirX Directory Manager
    • 3.3.0
  • DirX Identity
    • 9.0.3-pre
    • 9.0.2
    • 8.10.16
Home
  • DirX Identity
  • Identity REST Service
  • Open API Reference
9.0.3-pre 9.0.2 8.10.16

Open API Reference

DirX Identity REST Services - Kerberos Authentication Preface

DirX is a registered trademark © Copyright ${currentyear}, Atos Group – All rights reserved.

The UI for this site is derived from the Antora default UI and is licensed under the MPL-2.0 license. Several icons used are provided by Google and are licensed under the Apache License Version 2.0.