# OpenAM Administration Guide
2.2.5. Hints For the Core Authentication Module

Sidebar | Prev | Up | Next

#### 2.2.5.5. Core - General

This section of the Core Authentication module includes general options.

Default Authentication Locale

  Specifies the default language subtype to be used by the Authentication Service. The default value is `en_US`.

  ssoadm attribute: `iplanet-am-auth-locale`

Identity Types

  Lists the type or types of identities used during a profile lookup. You can choose more than one to search on multiple types if you would like OpenAM to conduct a second lookup if the first lookup fails. Default: Agent and User

  Agent

    Searches for identities under your agents.

  agentgroup

    Searches for identities according to your established agent group.

  agentonly

    Searches for identities only under your agents.

  Group

    Searches for identities according to your established groups.

  User

    Searches for identities according to your users.

  ssoadm attribute: `sunAMIdentityType`

Pluggable User Status Event Classes

  Specifies one or more Java classes used to provide a callback mechanism for user status changes during the authentication process. The Java class must implement the `com.sun.identity.authentication.spi.AMAuthCallBack` OpenAM interface. OpenAM supports account lockout and password changes. OpenAM supports password changes through the LDAP authentication module, and so the feature is only available for the LDAP module.

  A .jar containing the user status event class belongs in the `WEB-INF/lib` directory of the deployed OpenAM instance. If you do not build a .jar, add the class files under `WEB-INF/classes`.

  ssoadm attribute: `sunAMUserStatusCallbackPlugins`

Default Authentication Level

  Specifies the default authentication level for authentication modules.

  ssoadm attribute: `iplanet-am-auth-default-auth-level`