Allow self requests

No

Whether a user who has access to the Request Card, Request Replacement Card, Issue Card, Request Card Update or Batch Request Card workflows can create a request for a card for themselves.

Auto-enroll from directory

No

Whether information about a person from an LDAP directory with a matching device serial number can be used to automatically populate the People table, allowing holders to self-enroll.

Cannot be edited.

Ignore UPN and SAMAccountName checks for Self-Service jobs

No

If the Self-Service App fails to retrieve a list of jobs, and the person does not have a UPN or SAMAccountName, set this option to Yes to ignore the checks for UPN and SAMAccountName.

See the Disabling UPN and SAMAccountName checks for the Self-Service App section in the Web Service Architecture guide.

Restrict Self Activation

No

When set to Yes, you have access to the operations allowed by the Activation User role only if these operations are already permitted by your assigned roles; when set to No, you have access to all operations allowed by the Activation User role, whether or not your own assigned roles provide access.

See section 22.1, Configuring a credential profile for activation.

Self-service

Yes

This option determines whether users can edit their own device details or perform updates to devices that belong to them; for example, to cancel a device.

Cannot be edited.

Self-service emergency password

Yes

Someone with a MyID account can set a temporary password for own use with authentication services.

Cannot be edited.

Self-service Resynchronization

Yes

This option determines whether users can resynchronize their own cards.

Cannot be edited.

Self-service Unlock

Yes

This option determines whether holders can unlock their own devices.

Unknown card logon

No

Whether an unknown device can be used to self-enroll.

Cannot be edited.