Credential state

A credential can be in one of several states, as depicted in the simplified state diagram below. The states and the state transitions available depend on the used credential type and the configured policy. The normal state is Active. Any credential that is in one of the states in the "non-shaded" area (Disabled, Archived, Temporarily Locked, Locked) cannot be used for login at the moment.

Changing a credential to Disabled, Archived and Changed by Administrator is almost always possible when a user has the permissions to modify credentials.

Previous state diagram