How does Active Directory attribute UserAccountControl affect AdminUI login?

Document ID : KB000052205
Last Modified Date : 14/02/2018
Show Technical Document Details

Description:

When using Active Directory as External Administrator Store, SiteMinder AdminUI login is dependent on the user's current Active Directory userAccountControl attribute value and the status of the account.

Solution:

If UserAccountControl attribute has value 512, user will be granted access.
If UserAccountControl attribute has value 514, user will be denied access.

If UserAccountControl attribute has value 512 and user must change password at next login is not set, user will be granted access.
If UserAccountControl attribute has value 514 and user must change password at next login is set, user will be denied access.