Computation of active status of a user

You can compute the active status of a user based on several operational attributes.

In

UserMapping.json, the conversion

IsActive enables this computation.

The attribute accountLockedCode is included in the return body. This attribute is set if the active status is false and is a comma-separated list that contains the reasons why the account is locked. The following reasons are possible:

ibm-pwdAccountLocked
If the value of this attribute is true, it means that the account was administratively locked.

pwdAccountLockedTime
This attribute indicates that the account was locked for some reason and when the account was locked. For example, the account might be locked due to excessive login failures.

pwdChangedTime
This attribute indicates that the password expired and specifies when the password was last changed.

pwdFailureTime
This attribute indicates too many failed login attempts and specifies the times that the failures occurred. It can be a temporary lock, which depends on the password policy.