Broadcom Validation for username on user registration

[anonymousIDM]

Hello,

Is there any validation Broadcom is doing out of the box for username through Siteminder or IDM? 

For context, we are seeing a message restricting an asterisk * anywhere in the username. However, all other special characters we have tried seem to be allowed. This is for a user registration in which the user is allowed to select their own username. 

The characters we have found to be allowed are ) ( % ^ $ / \ ; # @ ' - !

Thank you

[Rinat Matityahu]

Hi

When it comes to Identity Manager user validation, out of the box, Directory definition (ie dir.xml) contains the following validation rule for the user name

        <ValidationRule name="Valid User Pattern" description="valid pattern for user name" messageid="4422">
            <RegularExpression><![CDATA[[^%+\\\"&\\[\\\\\\]\\^'{|}<>#,/\r\n*]+]]></RegularExpression>

Transforming this regex into a user friendly rule, we can gather the following:

Rule Summary

Core Rule: A valid username must be at least 1 character long and can contain standard text, numbers, spaces, and standard punctuation-except for a specific list of prohibited special characters and line breaks.

Detailed Rules

1. Requirements

• Minimum Length: Must contain at least 1 valid character.

• Allowed Characters: Letters (a-z, A-Z), numbers (0-9), spaces, and safe punctuation like periods (.), hyphens (-), underscores (_), at signs (@), or exclamation points (!).

2. Disallowed Characters

The system will reject any username containing any of the following symbols or formatting:

Category	Forbidden Characters
Quotes & Slashes	" (Double quote), ' (Single quote), \ (Backslash), / (Forward slash)
Brackets & Braces	[ ] (Square brackets), { } (Curly braces), < > (Angle brackets)
Symbols & Math	% (Percent), + (Plus), * (Asterisk), ^ (Caret), | (Pipe)
Punctuation & HTML	& (Ampersand), # (Hash/Pound), , (Comma)
Formatting	Line breaks / Enter key (\r, \n)

As a note, this is only valid when using is created via Identity Manager - SiteMinder will not apply the logic implemented in this file.

If you would like to discuss further about the logic / enforcement of this validation rule, please follow up with us over at the IGA community page

Many thanks

Regards

Rinat