Configure person service attributes

In the Management Portal at Entitlement Catalog, on the Attributes tab of the service page, configure person attributes to retrieve any identifiers or attributes for a person in a workflow action. This enables you to retrieve, for example, the manager of an actor in an Approve Transaction workflow action.

Configuration

Field

Explanation and Tips

Restricted information

Mask the attribute value in the Management Portal. This ensures you can be compliant with the privacy laws of your country or organization, as unauthorized administrators do not have access to private information like e-mail addresses, phone numbers, social security numbers, etc. This functionality applies to the Management Portal only; restricted information is still shown in the Web Portal.

  • Authorized administrators see the icon Eye-outline-vector-256-256 for restricted attributes and their placeholders anywhere in the Management Portal. They can click this icon to view their value. These values are hidden again when the page is refreshed. This prevents situations in which unauthorized administrators can view restricted information by shoulder surfing authorized administrators. Where appropriate, a button is available to view ALL restricted attributes at once.
  • Unauthorized administrators see the icon Evil eye for restricted attributes and their placeholders. At Transactions, restricted attributes are shown as [attributename]. Although unauthorized administrators cannot see the attribute value, this still allows them to verify if the context or definition of the attribute is correct.
  • You can set administrative permissions on this functionality.
  • The value is also restricted if it is determined by a restricted service attribute, people attribute or people identifier.

Person identifier

Specify the person identifier for which Identity Director should retrieve data.

Initial value

Optionally, specify a default value of the service attribute.

You can force mandatory input by enabling Attribute may not be empty after workflow input from actor.

You can use the service attribute in multiple pages of a Provide Information workflow action by enabling Attribute can be used in multiple pages on Provide Information.

Placeholders

When you insert a person service attribute as a placeholder in actions, you can use the following options to retrieve data of the person identified by the attribute:

Placeholder

Explanation

#Service[Person.{ServiceAttributeName}.Name]

Resolve the name of the person determined by the service attribute.

Person identifier

#Service[Person.{ServiceAttributeName}.Identifier.{PersonIdentifierName}.{Data}]

Resolve data of the specified identifier of the person determined by the specified service attribute.
Possible data:

  • Value - returns the value that is stored in the attribute
  • Description - returns the description you specified for the attribute

Person attribute (Text)

#Service[Person.{ServiceAttributeName}.{PersonAttributeName}.{Data}]

Resolve data of the specified text person attribute for the person determined by the service attribute.
Possible data:

  • Value - returns the value that is stored in the attribute
  • Description - returns the description you specified for the attribute

Person attribute (Password)

#Service[Person.{ServiceAttributeName}.{PersonAttributeName}.{Data}]

Resolve data of the specified password person attribute for the person determined by the service attribute.
Possible data:

  • Encrypted - returns the password in encrypted form
  • ClearText - returns the password in clear text
  • Description - returns the description you specified for the attribute

Person attribute (Table)

#Service[Person.{ServiceAttributeName}.{PersonAttributeName}.{Data}]

Resolve data of the specified table person attribute for the person determined by the service attribute.
Possible data:

  • FullTable - returns the full table
  • CurrentRow.FullRow - returns all data for the selected row
  • CurrentRow.{ColumnName} - returns the value in the specified column for the selected row
  • EntireColumn.{ColumnName} - returns all data in the specified column
  • Number of rows - returns the number of rows in the table
  • Description - returns the description you specified for the attribute

You can also click Placeholders to select from a list of available placeholders and insert them in the field.