Create Account Attributes
Note
Attributes marked with an asterisk (*) are mandatory.
The following are the provisioning policy attributes for Create

Type of the account to be created
Default value: User
When creating a Domain, the object type must be domain
.
When creating a Service Account, the object type must be serviceAccount
.
User Creation Attributes

The user's last name

The user's first name

Password for the user account

Primary email address of the user

Indicates if the user is suspended

Indicates if the user is forced to change their password the next time they log in

Hash function name for password
Available values:
-
MD5
-
SHA-1
-
crypt

Indicates if the user's profile is visible in the Global Address List

Indicates if the user's IP address is whitelisted

Full path of the user's parent organization
Root organization is represented as forward slash (/)

Custom schema attribute assigned to the user
The attribute must be in the schema before adding to the provisioning policy.
The customSchema
attribute is a placeholder for an actual custom schema attribute name. Use the custom schema attribute name while defining the provisioning policy. For more information, refer to Managing Custom Schema Attributes.
Address Attributes

The user's country

Country code associated with the user's country

Extended addresses, such as an address that includes a sub-region

The town or city of the address

The post office box, if present

The ZIP or postal code, if applicable

Indicates if this is primary address of the user

The abbreviated province or state

Indicates if the user-supplied address was formatted
Important
Formatted addresses are not currently supported.

The street address
White space within the string is ignored.

The address type
Available values:
-
custom
-
home
-
other
-
work

Custom address type
Email Address Attributes

User's primary email address or an alias

Indicates if this is the user's primary email

The type of the email account
Available values:
-
custom
-
home
-
other
-
work

Sets the custom email type
External IDs Attributes

The type of the ID
Available values:
-
account
-
custom
-
customer
-
network
-
organization

Sets the custom external ID type

The value of the ID
Messenger Attributes

IM Type
Available values:
-
custom
-
home
-
other
-
work

Custom IM type

The user's IM network ID

Indicates if this is the user's primary IM

An IM protocol identifies the IM network. The value can be a custom network or the standard network.
Available values:
-
custom_protocol – A custom IM network protocol
-
aim – AOL Instant Messenger protocol
-
gtalk – Google Talk protocol
-
icq – ICQ protocol
-
jabber – Jabber protocol
-
msn – MSN Messenger protocol
-
net_meeting – Net Meeting protocol
-
qq – QQ protocol
-
skype – Skype protocol
-
yahoo – Yahoo Messenger protocol
Organization Unit Details

Name of the organization

The cost center of the user's organization

Specifies the department within the organization

Description of the organization

Domain the organization belongs to

Physical location of the organization

A string indicating if this is the user's primary organization

Text string symbol of the organization

User's title within the organization

Type of organization.
Available values:
-
unknown
-
school
-
work
-
domain_only

Sets the custom organization type
Phone Attributes

Indicates if this is the user's primary phone number

The user's phone number

The type of phone number.
Available values
-
custom
-
home
-
work
-
other
-
home_fax
-
work_fax
-
mobile
-
pager
-
other_fax
-
compain_main
-
assistant
-
car
-
radio
-
isdn
-
callback
-
telex
-
tty_tdd
-
work_mobile
-
work_pager
-
main
-
grand_central

Sets the custom phone type
Relation Attributes

The name of the person the user is related to

The type of relation
Available values
-
custom
-
spouse
-
child
-
mother
-
father
-
parent
-
brother
-
sister
-
friend
-
relative
-
domestic_partner
-
manager
-
assistant
-
referred_by
-
partner

Sets the custom relation type
Complex Attributes

A list of the user's email addresses
Each email can consist of values for emailAddress
, emailtype
, emailCustomType
, and ifPrimary
attributes.

A list of organizations the user belongs to
Each organization can consist of values for organizationName
, organizationTitle
, primaryOrganization
, organizationType
, organizationCustomType
, department
, organizationSymbol
, organizationLocation
, description
, domain
, and costCenter
attributes.

A list of the user's phone numbers
Each phone can consist of values for the value
, primaryPhone
, phoneType
, and phoneCustomType
attributes.

A list of the user's relationships to other users
Each relation can consist of values for the value
, relationType
, and relationCustomType
attributes.

A list of the user's addresses
Each address can consist of values for the following attributes:
addressType
, addressCustomType
, sourceIsStructured
, sourceIsStructured
, poBox
, extendedAddress
, streetAddress
, locality
, region
, postalCode
, country
, primaryAddress
, and countryCode
.

A list of external IDs for the user, such as an employee or network ID
Each external ID can consist of values for the externalIdsValue
, externalIdsType
, and externalIdsCustomType
attributes.

A list of user's Instant Messenger (IM) accounts.
Each IM can consist of values for the IMType
, IMCustomType
, IMprotocol
, IMCustomType
, IMID
, and primaryIM
attributes.

IAM resource permissions assigned to the domain.

A list of the user's locations. Each location can consist of values for the following attributes:
area
, buildingId
, customType
, deskCode
, floorName
, floorSection
, and type
.
Domain Creation Attributes

Name of the domain to create

(Applicable only for verified domain) IAM resource permissions assigned to the domain
Service Account Creation Attributes

The ID of the project that owns the service account

Account ID of the service account

Name for the service account

Description for the service account

Groups connected to the service account

IAM resource permissions assigned to the domain
Note
To display additional attribute on provisioning form other than the default provided, add the section entry to that attribute manually from the application debug page. This indicates which section of create form would display this field.
For example, <Field displayName="suspended" name="suspended" section="User" type="string"/>
In the above example, the suspended
attribute is added from UI as required and from the Debug page the section="User"
attribute is added. This indicates that the suspended
attribute belongs to User section.
The following are the supported values for this section:
-
section="User"
-
section="Service Account"
-
section="Domain"