Password credential validator configuration reference

Case-Sensitive Matching

Allows case-sensitive expression and LDAP error matching.

Display Name Attribute

Indicates the display name to use for personalizing messages in password reset, account unlock, and username recovery flows. The default value is:

PingID Username Attribute

Indicates the username to use for PingID-based password reset flow. The default value is:

Username Attribute

Indicates the username to use in account recovery flow. The default value is:

Mail Verified Attribute

Indicates whether the user’s email address is verified. This attribute is used in password reset, account unlock, and username recovery flows.

Acceptable values are true or false. The default value is:

SMS Attribute

Indicates the phone number to use for SMS password reset flow. The default value is:

Enable User Group Info Retrieval

If selected, the adapter makes a request to retrieve user group info during credential authentication. It populates the memberOfGroupIDs and memberofGroupNames core contract attributes with the retrieved values.

This checkbox is selected by default.

Enable Device Info Retrieval

If selected, the adapter makes a request to retrieve device info during credential authentication. It populates the devices.phone and devices.email core contract attributes with the retrieved values.

This checkbox is selected by default.

Enable Password Expiry Info Retrieval

If selected, the adapter makes a request to the password policy endpoints to retrieve expiration information during credential authentication. It populates the passwordExpiryTime core contract attribute with the retrieved values.

This checkbox is selected by default.