Attribute matching

An adoption policy matches the attributes for an account on a managed resource to the attributes for an IBM Verify Identity Governance user. If the match occurs, the account is assigned to the user so that the user owns the account. For example, the user can change the IBM Verify Identity Governance account password. Otherwise, the account is identified as an orphan.

The default global adoption policy assigns an account to a user if the account user ID attribute matches the IBM Verify Identity Governance user UID attribute.

Matching can use either single or multi-valued attributes. Matching occurs if the string value is identical to one of the following attributes:

• A single account attribute and a single user attribute
• Either a single attribute or any multi-valued attribute for either the account attribute or the user attribute