Credentials Display

The Network Identity Manager credentials display, when open, displays the current status of your network identities and provides you the tools necessary to obtain new credentials, renew existing credentials, destroy credentials, change your password, configure the behavior of your network identities, and access the on-line help. There are two primary views of network identity status: basic and advanced.

The basic view provides status information of the currently available identities whereas the advanced view provides more detailed information of all the active credentials.

You can switch between the two views using F7 or using the View menu.

Basic view

Figure 1: Network Identity Manager Basic View

The basic view gives a brief overview of the active identities. The contents of the identity display area is equivalent to the advanced view with the exception of the credential list line which gives the number and type of credentials available for each identity.

Advanced View

Figure 1. Network Identity Manager Advanced View

The advanced credentials view organizes them grouped by identity name, credential type and then by location. Each credential is then shown under each group heading sorted by the credential name. The default headings for the credential view provides you with a minimal amount of information to reduce clutter.

You can add columns to the display using the Choose columns... action on the View menu or by right-clicking on the header as shown in Figure 2.

Figure 2: Menu for choosing display columns

In addition, you can click on the column header to change the sort order for each field or double-click on a column header to toggle grouping. You may also drag fields to change the column ordering.

The View menu lets you switch between several pre-defined layouts for the advanced credentials view. For more information, see Managing the credentials view layout.

Expiration states

The header backgrounds and the credential rows change color if the credentials are about to expire or are expired.

Identity display

Identity outline

Figure 3: Annotated sample identity outline

The identity display has the following components:

Expand widget
Clicking on the expand widget toggles the display of contained credential information.
Identity icon
This is the icon associated with the identity. An icon will be assigned by default based on the type of the identity. You can customize the icon using the Choose icon button of the Identity configuration dialog.
Default identity widget
The default identity is indicated in the credentials display using a filled star icon (). A non-default identity has an empty start icon (). If the identity is not the default, clicking on the star will make it the default.
Identity name
This is the display name for the identity.
Identity type
The type of the identity as reported by the identity provider.
Lifetime
The remaining lifetime of the identity credentials. For Kerberos v5 identities, this is the lifetime of the initial ticket granting ticket. The lifetime is always shown in relative form. If the identity credentials have already expired, the lifetime will be displayed as (Expired)
Pin
Normally, the only identities that will be displayed on the credentials window are those that have credentials associated with them. However, if an identity is pinned, it will always be displayed, even if there are no credentials. The push pin icon indicates whether this identity is pinned () or not pinned (). Clicking on the icon can toggle the pinned state.
Lifetime meter
Provides a visual indication of the remaining lifetime in proportion to the total lifetime. Clicking on the lifetime meter starts a renewal of the identity.

Working with credentials

Selection

You can select identities and credentials using either the cursor keys on the keyboard or by clicking using the mouse. The credentials display follows the usual selection actions on Windows:

Alternatively, you can use the keyboard to move around the credentials display and select identities and credentials.

Invoking the Destroy credentials action while a set of credentials are selected results in an attempt to destroy all of the selected credentials.

Other actions, such as the New credentials action are only affected by the cursor selection.

Invoking the context menu

For more information see Credentials display context menu.

Managing the credentials display layout

For more information see Managing the credentials display layout