account

The <account> node is applicable only application for type name "account”.The purpose of this extension is to instruct the querying agent how to interpret the results of a <member-assignment-query> of an <entitlement> with type name <account>. The extensions are noted in a new <account> child node of the <entitlement> node in the entitlements section. The <account> node groups the <account> extension instructions.

Example

<account>
<account-id source="read-attr" source-name="sAMAccountName"/>
<account-id source="read-attr" source-name="userPrincipalName"/>
<account-id source="src-dn"/>
<account-id source="association"/>
<account-status source="read-attr" source-name="dirxml-uACAccountDisable" active="false" inactive="true"/>
</account>

1. Allowed Content

account-id
id of account in connected system
account-status
account status (active/inactive) in connected system

2. No Attributes

3. Content Rule

( account-id + , account-status ? )

4. Parent Elements

entitlement
  entitlement definition

Top Elements || All Elements || Tree


EntitlementConfiguration DTD