# OpenAM Administration Guide
2.2. Configuring Authentication Modules

Sidebar | Prev | Up | Next

### 2.2.13. Hints For the Membership Authentication Module

The Membership module permits self-registration for new users. You can then have OpenAM create new user profiles in the identity repository.

ssoadm service name: `iPlanetAMAuthMembershipService`

Minimum Password Length

  Specify the minimum acceptable number of characters in the password provided during self-registration.

  ssoadm attribute: `iplanet-am-auth-membership-min-password-length`

Default User Roles

  Specifies the Distinguished Name (DN) of a role to be assigned to a new user whose profile is created. There are no default values. The role specified must be within the realm for which the authentication process is configured.

  This role can be either an OpenAM or Sun DSEE role, but it cannot be a filtered role. If you wish to automatically assign specific services to the user, you have to configure the Required Services attribute in the User Profile.

  ssoadm attribute: `iplanet-am-auth-membership-default-roles`

User Status After Registration

  If you choose Inactive, then the new user has no access to services until an administrator activates the account.

  ssoadm attribute: `iplanet-am-auth-membership-default-user-status`

Authentication Level

  Sets the authentication level used to indicate the level of security associated with the module. The value can range from 0 to any positive integer.

  ssoadm attribute: `iplanet-am-auth-membership-auth-level`