CA Identity Manager: Possible values for Disabled State

Document ID : KB000076864
Last Modified Date : 10/04/2018
Show Technical Document Details
Question:
What do all of the different values for Disabled State mean in Identity Manager?
Answer:
Here is a list of all of the values: 

ENABLED_VALUE 0 (enabled)
MASK_ADMINDISABLED 1 (disabled by an administrator)
MASK_MAXLOGINFAIL 2 (disabled because they reached max login attempts)
MASK_INACTIVITY 4 (disabled due to inactivity)
MASK_PWEXPIRED 8 (disabled due to password expired)
MASK_PWMUSTCHANGE 16777216 (account is NOT disabled but password will be forced to change on next login)

So for example, if your users are have a disabled state of 3:
3 (1+2) = MASK_ADMINDISABLED + MASK_MAXLOGINFAIL => disabled cause of maximum failing attempts reached