# ActivationLockoutStatusCapabilityType (Complex Type)

### Namespace: http://midpoint.evolveum.com/xml/ns/public/resource/capabilities-3

Supertype: CapabilityType
Describes capability to provide lockout status (e.g. account temporarily disabled due to many failed login attempts).

Item Summary
Name | Type | Multiplicity | Description
--- | --- | --- | ---
enabled | property boolean | [0,1] | Element specifying whether the capability is enabled or disabled.
returnedByDefault | property boolean | [0,1] |
attribute | property QName | [0,1] | Name of the attribute to use for account lockout status.
normalValue | property string | [0,-1] | Value to set to the attribute when the account is in a normal state (not locked out).
lockedValue | property string | [0,-1] | Value to set to the attribute when the account is locked out.
ignoreAttribute | property boolean | [0,1] | Flag that controls whether the original attribute should be ignored.

- ### Items

  - #### enabled

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Display order:

    Element specifying whether the capability is enabled or disabled. Enabled capability work as usual (this is the default). Disabled capability acts as it is not there at all. This is used to disable undesirable native capabilities. Each capability definition should have this element. It is made a top-level element in this XSD definition to make that easier.

  - #### returnedByDefault

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Display order:

  - #### attribute

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Display order:

    Name of the attribute to use for account lockout status. This is a configuration of simulated lockout capability.

  - #### normalValue

    Flags: RAM,runtime

    Multiplicity: [0,-1]

    Display order:

    Value to set to the attribute when the account is in a normal state (not locked out). This is a configuration of simulated lockout capability. More than one value can be specified. All specified values will be compared to the attribute when the activation status is read from the resource (get operation). The value that matches will determine the activation state. But only the first value will be used when storing the lockout state to the resource (add or modify operations). All other values will be ignored.

  - #### lockedValue

    Flags: RAM,runtime

    Multiplicity: [0,-1]

    Display order:

    Value to set to the attribute when the account is locked out. This is a configuration of simulated lockout capability. More than one value can be specified. All specified values will be compared to the attribute when the activation status is read from the resource (get operation). The value that matches will determine the lockout state. But only the first value will be used when storing the activation state to the resource (add or modify operations). All other values will be ignored.

  - #### ignoreAttribute

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Display order:

    Flag that controls whether the original attribute should be ignored. If set to true (or not present at all) the original attribute used as a source of simulated capability is marked as "ignored" in the schema. If set to false then the original attribute is still present in its original form in the schema. This option is meaningful only for simulated enable/disable, i.e. in case that the "attribute" element above is set.