Limitations

• It is not possible to avoid calling the credentials attribute entitlement service during credential refresh. When we have an attribute that should be set only once (during initial authentication) use an extended attribute external authentication C API module to set the attribute.

Parent topic: Credential refresh concepts