Identity Cloud

Attribute Present Decision node

The Attribute Present Decision node checks whether an attribute is present on an object, including private attributes. There is no need to specify the value of the attribute.

Use this node during an update password flow to check whether the local account has a password, for example.

This node is similar to the Attribute Value Decision node when that node is set to use the PRESENT operator, except it can’t return the value of the attribute, but can work with private attributes.


Product Compatible?

ForgeRock Identity Cloud


ForgeRock Access Management (self-managed)


ForgeRock Identity Platform (self-managed)



This node reads the Identity Attribute from the shared node state. If it can’t read the Identity Attribute, it reads the userName from the shared node state.

It uses the value to look up the identity object.


This node depends on the underlying identity service to look up the user object.


Property Usage

Present Attribute

The attribute whose presence you want to verify in the the underlying identity service object. This can be an otherwise private attribute, such as password.

This field is case-sensitive and must match the the underlying identity service object attribute; for example, givenName, not givenname.

Default: password

Identity Attribute

The attribute used to identify the managed object in the underlying identity service.

Default: userName





The node found the attribute in the managed identity object.


Any other case.


This node does not log error or warning messages of its own.


This journey to update a password uses the Attribute Present Decision node to check whether the account has a password:

Checking whether an account has a password

The user has already authenticated before beginning this journey:

Copyright © 2010-2024 ForgeRock, all rights reserved.