This form is used to temporarily enable and disable established identities. A disabled identity is "hidden"; it is not considered for access control purposes and is not reported by dacs_current_credentials. A disabled identity may later be enabled in the same session, however, and you may signout a disabled identity. You may use this service repeatedly to manipulate identities.
The select operation replaces any currently enabled identities with the specified one or ones. The deselect operation disables the specified enabled identities. The add operation adds the specified disabled identities to the set of enabled identities. To see the set of enabled identities, use the list operation, and to unhide all identities, use the clear operation.
Special operations are available to select and deselect the "unauthenticated" state.
- You may provide both a username and a jurisdiction to specify the identity that you would like to select, deselect, or add. Use the official, abbreviated name for the jurisdiction. Exact string matching is used.
- If you provide neither a username nor a jurisdiction, the select/deselect/add operation will apply to all established identities. In the case of deselect, disabling all identities effectively makes you unauthenticated.
- If you provide a username only, identities matching that username at any jurisdiction will be selected/deselected/added.
- If you provide a jurisdiction only, all identities authenticated by that jurisdiction will be selected/deselected/added, regardless of the username.
Copyright (c) 2003-2017 DSS Distributed Systems Software, Inc.
$Id: select_credentials.html 2974 2017-10-30 22:22:59Z brachman $