Self management pages

Page properties


Define the general setup of the page.

Property Description
Name A unique name for the page – not used in user interface .
Index The order in which this page should appear in the tab menu.
Title The label that will be shown for the page’s menu tab.
Header The main header on the page.
Description A description of the page just under the main header.

Below is shown where the properties Title, Header and Description are used on an Edit page.

Required attributes


Define the rules for when a user will shown this page. If no required attributes are added, then anyone who is already registered as a user in Identify, will have access.

Property Description
Name The incoming claim type, whose value is used to check whether a user should see the page. References the claim types specified by name in the Attributes section.
Value The expression that the value should fulfill in order for the page to be shown to the user. Below are a few examples of the expressions that can be used:<Attribute name=”role” value=”Superuser”/>

<Attribute name=” ” value=” “/>

<Attribute name=” ” value=” “/>

Please notice that values are case-sensitive.

Insert attributes


Specifies the claim types that we want to save values for.

Property Description
Name References the claim types specified by name in the Attributes section. Settings for how the claim type fields will appear, validations, etc. are set in that section as well.
canUserChooseCorrectValue Given that the system in incoming token receives a claim value for an existing user, which is different than what is already registered in the database, then this boolean setting defines, whether the user will be allowed to choose which one is the correct one.
valueResolveBy If the property canUserChooseCorrectValue is set to false, then given that the situation occurs, where the incoming value of a claim type is different from the one in Identify, this property defines which one will be inserted as default value in the page. Possible options are ”Token”, meaning that the value of the incoming token will be used, or ”Identify”, meaning that the existing value in Identify will be used.

Notice that the rule for Avoid elevation aka Avoid upsize (please refer to the Safewhere*Identify guidelines to learn more) is actually in effect on Self Management pages. When activated, any incoming claim type that includes a value, which the user does not have the right to in Identify will be ignored. Options that the user does not already have, will also be hidden as options when Claim Type is shown on the page.

Another rule that is on the other hand not enforced, which may exist when using the Safewhere*Identify interface for the specific claim, is the Restrict view and editing of sub-organizations. Should you wish to enforce this rule in UserProv, you will have to configure individual pages for each organization accordingly.

Default or Auto generate values attributes


Specifies both default values as well as options for auto generating values. The latter is typically used for username type fields, where the claim type is set to hidden with an autogenerate option, so that user would automatically be given a username, but not told about it.

An example of this section is:

It is actually possible to have both default values and autogenerate values, since they are triggered at different times. Default values are inserted into the page in case it is empty on opening the page (which it would be if there were no values for the claim in the token or in identify), whereas autogenerated values are first applied at the point of time where the page is saved to Identify and it is found to be empty.

Property Description
Name References the claim types specified by name in the Attributes section.
valueExpression Specifies the value that will be autogenerated for the field. Notice that the symbol ’#’ will be automatically replaced by a number and the symbol ’%’ will automatically be replaced by a character.An example of a valueExpression could be ”CopenhagenOfficeUser####%%%”.
DefaultValue The default value to be given to the claim type if empty.
Was this helpful ?Good Somewhat Bad