> For AI agents: [llms.txt](https://docs.trustedauth.com/llms.txt) provides a Markdown index of this documentation.

# Create and manage user attributes

User attributes are the information fields stored in a User Profile. IDaaS supports two types of attributes:

- [**System user attributes**](#system-user-attributes) are created by IDaaS. You can modify these attributes, but you cannot delete them. You must enter a value for required system attributes.
- [**Custom user attributes**](#manage-custom-user-attributes) are additional attributes that an administrator can add to a user profile. Some examples include:
  - An attribute to allow a user to access an application, such as Salesforce.
  - A custom user attribute for voice, SMS, email, WeChat, or WhatsApp delivery.
  - An alternate SMS attribute so users can receive one-time passwords on a secondary mobile device.

warning

All custom user attributes and some system-defined attributes can be set to mandatory or optional. The maximum length of a custom user attribute value is 1024.

You can change the settings of some system attributes, create new user attributes, and edit existing custom user attributes. See the following options for instructions:

## System user attributes

You can set the following system attributes as optional or required:

- Email

- First name

- Last name

- Mobile

- Phone

- User Principal Name

- Security ID

  > Security ID is a value that uniquely identifies users in your Microsoft Windows environment.

- External ID
  > External ID is a value that uniquely identifies users in your customer environment.

info

To enable OTP delivery, set a value for at least one of the following system attributes for the user:

- phone
- email
- mobile

If the user does not have values set for any of these system attributes, IDaaS can deliver OTPs only through the Admin OTP API.

### Edit a system user attribute

1. Click Menu icon **>** **Members > Attributes**. The **User Attributes List** page appears.
2. Under **System User Attributes**, click the user attribute. For example, click **First Name**. The **Edit User Attribute** dialog box appears.
3. Check **Attribute is required** if you want the attribute to be mandatory.
4. Click **Save**.

## Manage custom user attributes

You can create, edit, and delete custom user attributes.

### Create a custom user attribute

1. Click Menu icon **>** **Members > Attributes**. The **User Attributes List** page appears.
2. Under **Custom User Attributes**, **click** Add. The **Add User Attribute** dialog box appears.
3. Enter a **User Attribute Name** for the custom user attribute. For example, Alternate Email.
4. Select **Attribute is required** if you want the attribute to be mandatory for all users.
5. Select **Use this attribute for OTP delivery** if you want users to be able to use the attribute, for example, an alternate email address, to receive an OTP.
6. If you select, **Use this attribute for OTP delivery**, select the OTP delivery method from the drop-down list.
7. Click **Save** to create the attribute. The attribute now appears in a user profile.

note

If the custom user attribute is mandatory or being used for OTP delivery, you must add the attribute information to the user profile.

For example, if you create an alternate email for OTP delivery, you must add the email address to the user's profile to make the alternate email available for OTP. See [Add users](/docs/people-and-access/manage-members/add-users-to-identity-as-a-service/add-users.md).

### Edit a custom user attribute

1. Click Menu icon **>** **Members > Attributes**. The **Attributes List** page appears.
2. Click the name of the custom user attribute. The **Edit User Attribute** dialog box appears.
3. Edit the **User Attribute**, as required.
4. Click **Save**.

### Delete a custom user attribute

1. Click Menu icon **>** **Members > Attributes**. The **Attributes List** page appears.
2. Click Trash icon for the custom user attribute that you want to delete.
3. Click **Delete** on the confirmation prompt.