Attribute matching

An adoption policy matches the attributes for an account on a managed resource to the attributes for an IBM Security Identity Manager user. If the match occurs, the account is assigned to the user so that the user owns the account. For example, the user can change ISIM account password. Otherwise, the account is identified as an orphan.

The default global adoption policy assigns an account to a user if the account user ID attribute matches ISIM user UID attribute.

Matching can use either single or multi-valued attributes. Matching occurs if the string value is identical to one of the following attributes.

• A single account attribute and a single user attribute
• Either a single attribute or any multi-valued attribute for either the account attribute or the user attribute

Parent topic: Adoption policies