Mobile signature - policy parameters

This page lists the policy parameters specific to mobile signatures.

In addition to the policy parameters defined here, the parameters defined in the table in the chapter All credential types are also valid for mobile signature credentials.

note

The policy parameters create.restrictedRoles and modify.restrictedRoles are deprecated and will be removed in a future version. Please use the Credential-type specific permissions instead.

create.restrictedRoles DEPRECATED

• Data type: String

• Default: none

• Description: A list of roles that are allowed to create mobile signature credentials. The list has the following form:

  • Empty value ("") or parameter not set: no restrictions.
  • Set value: a user creating a mobile signature credential must have at least one of the listed roles.
  • Empty list ("[]"): disallows all users from creating mobile signature credentials (different from an empty value).

  Example: [nevisIdm.Root,nevisIdm.ClientRoot]

defaultMsspIdentifier

• Data type: String
• Default: none
• Description: Default value for the "MSSP identifier" attribute. This value will be set in the credential at creation or modification time if and only if no MSSP identifier value is supplied.

maxCredFailureCount

• Data type: int (>0) or -1
• Default: 3
• Description: Maximum number of login failures before the mobile signature credential is definitely locked. If set to -1, the max. failure counter is disabled.

modify.restrictedRoles DEPRECATED

• Data type: String

• Default: none

• Description: A list of roles that are allowed to modify mobile signature credentials. The list follows the same format and semantics as create.restrictedRoles.

  Example: [nevisIdm.Root,nevisIdm.ClientRoot]

validation.msisdn.regex

• Data type: String
• Default: none (no validation check performed)
• Description: Regular expression for input validation of the MSISDN. Example: ^(\+|00)(\d ?(\d ?){0,14}|\d{2} ?(\d ?){0,13}|\d{3} ?(\d ?){0,12})$|^0(\d ?){0,13}$