AuthenticationSequenceType (Complex Type)

Items

• name

  Flags: RAM,runtime

  Multiplicity: [0,1]

  Unique name of the authentication sequence. This name is fact a short identifier. It is supposed to give some idea about purpose of the sequence to system administrator. But it is not supposed to be used as a user-friendly label. Sequence name must be unique.

  Deprecated, use identifier instead

• identifier

  Flags: RAM,runtime

  Multiplicity: [1,1]

  Unique sequence identifier. Can be used to reference the sequence.

• displayName

  Flags: RAM,runtime

  Multiplicity: [0,1]

  Display name of sequence. This is shown for identifying of authentication sequence in GUI.

• description

  Flags: RAM,runtime

  Multiplicity: [0,1]

  Free form description of the sequence (administrator comment).

• documentation

  Flags: RAM,runtime

  Multiplicity: [0,1]

  Technical documentation for a particular object or construct.

  The purpose of this element is to document system configuration and behavior. The documentation will not be presented to end users. In fact, it will probably not be presented at all in midPoint user interface. This documentation element is supposed to be a part of the technical documentation of midPoint deployment. The tools than generate deployment configuration will look for these elements and combine them to compiled documentation document.

  AsciiDoc formatting is assumed for this element. Any leading or trailing whitespace is skipped. Indentation equivalent to he indentation of the first non-blank line of text is also skipped.

• channel

  Flags: RAM,runtime

  Multiplicity: [1,1]

  Specification of channel for authentication sequence.

• requireAssignmentTarget

  Flags: RAM

  Multiplicity: [0,-1]

  Required assignment target(s). This authentication sequence is applicable only to users that have active assignment with this target (and relation). If the sequence is attempted on a user that does not have this assignment then the authentication will fail. All targets must be present. They are checked against effective link values ("roleMembershipRef"). OID, type (if present), and relation is matched. If relation is not defined, org:default is assumed. Value of q:any may be used to denote any relation value.

• nodeGroup

  Flags: RAM

  Multiplicity: [0,-1]

  Required node group. This authentication sequence is applicable only to node group that have active assignment with this archetype.

• module

  Flags: RAM,runtime

  Multiplicity: [1,-1]

  Specification of authentication module in the sequence.

• focusBehaviorUpdate

  Flags: RAM,runtime,AVals:3

  Multiplicity: [0,1]

  Option for updating focus authentication behaviour attributes. We can enable/disable updating of focus behavior during every login, or we can use option for updating behaviour only when login failed and during success login after fails login. Default value is 'everyLogin'.