User information sources

A user information source is a configurable component that enables communication with an endpoint to retrieve user and group information.

IBM QRadar systems support the following user information sources:
Table 1. Supported information sources
Information Source Information that is collected
Microsoft Windows Active Directory (AD), version 2008 - Microsoft Windows AD is a directory service that authenticates and authorizes all users and computers that use your Windows network.
  • full_name
  • user_name
  • user_principal_name
  • family_name
  • given_name
  • account_is_disabled
  • account_is_locked
  • password_is_expired
  • password_can_not_be_changed
  • no_password_expired
  • password_does_not_expire
IBM® Security Access Manager (ISAM), version 7.0 - ISAM is an authentication and authorization solution for corporate web, client/server, and existing applications. For more information, see your IBM Security Access Manager (ISAM) documentation.
  • name_in_rgy
  • first-name
  • last-name
  • account_valid
  • password_valid
IBM Security Identity Manager (ISIM), version 6.0 - ISIM provides the software and services to deploy policy-based provisioning solutions. This product automates the process of provisioning employees, contractors, and IBM Business Partners with access rights to the applications they need, whether in a closed enterprise environment or across a virtual or extended enterprise. For more information, see your IBM Security Integration Manager (ISIM) documentation.
  • Full name
  • DN