This event is generated when you select the Web Service Modify Handled option under Audit Logging on the Audit and Logging (on the Home page, click Identity Servers > [cluster name] > Audit and Logging) page of an Identity Server configuration. Identity Server uses this event for two types of Web service modify requests:
Discovery: This is a request to discover a service to modify. For this type of request, the Group (G) field is not used. For a remote request, the Data Description of the Value1 field is set to 0. For a local request, the Data Description of the Value1 field is set to 1.
Profile: This is a request to modify the attributes of a user in a profile (personal, credential, etc.). For this type of request, the Group (G) field contains a GroupingID for all attributes selected in the request. A separate event is generated for each attribute select list in the modify request. For a remote request, the Data Description of the Value1 field is set to 0. For a local request, the Data Description of the Value1 field is set to 1.
Description: NIDS: Web Service modify
Originator (B): Schema Title: Originator Data Description: JCC Device ID (AMDEVICEID#device_id:)
Target (U): Schema Title: User Identifier Data Description: User DN
SubTarget (Y): null
Text1 (S): Schema Title: Provider Identifier Data Description: Requesting Provider ID
Text2 (T): Schema Title: Select String Data Description: Modified attributes select string
Text3 (F): Schema Title: Service Identifier Data Description: Web Service URI
Value1 (1): Schema Title: Local Data Description: 0 – Remote; 1 – Local
Group (G): Schema Title: Modify Group Data Description: If this is a profile modify, it contains the grouping ID for each attribute select list in the request. Otherwise, this field is not used in the event.
Data Length (X): 0
Data (D): null