This event is generated when you select the Web Service Modify Handled option under Audit Logging on the Logging page of an Identity Server configuration. Identity Server uses this event for two types of Web service modify requests:
Discovery: This is a request to discover a service to modify. For this type of request, the Group (G) field is not used. For a remote request, the Data Description of the Value1 field is set to 0. For a local request, the Data Description of the Value1 field is set to 1.
Profile: This is a request to modify the attributes of a user in a profile (personal, credential, etc.). For this type of request, the Group (G) field contains a GroupingID for all attributes selected in the request. A separate event is generated for each attribute select list in the modify request. For a remote request, the Data Description of the Value1 field is set to 0. For a local request, the Data Description of the Value1 field is set to 1.
Description: NIDS: Web Service modify
Originator (B): Schema Title: Originator Data Description: JCC Device ID (AMDEVICEID#device_id:)
Target (U): Schema Title: User Identifier Data Description: User DN
SubTarget (Y): null
Text1 (S): Schema Title: Provider Identifier Data Description: Requesting Provider ID
Text2 (T): Schema Title: Select String Data Description: Modified attributes select string
Text3 (F): Schema Title: Service Identifier Data Description: Web Service URI
Value1 (1): Schema Title: Local Data Description: 0 – Remote; 1 – Local
Group (G): Schema Title: Modify Group Data Description: If this is a profile modify, it contains the grouping ID for each attribute select list in the request. Otherwise, this field is not used in the event.
Data Length (X): 0
Data (D): null