Google Message Security for Google Apps Administration Guide - Manual (Page 390)

390 Message Security for Google Apps Administration Guide
<-date->
The timestamp indicating the date and time the notification was sent.
<-from->
The return address, referenced as your organization's Support Contact in the
“Support Address” field (see organization record).
<-address->
The specific user's email address.
<-notice_address->
Used as the location to send notifications as found on each user's user
record.Note: By inserting this address as the “To” recipient, the notification is
sent to a recipient which may not necessarily be the owner of the Message
Center account. In most cases, you should use the Notice Address for the
“To” line-if no “Notice Address” address exists for a user record, this field
defaults to inserting the normal user “Address” (above). The Notice Address is
especially important if another administrator manages a user's Message
Center on behalf of the user — for example, in a corporate environment to
enforce user-level settings while also denying account access.
<-isp->
The <-isp-> token is replaced by the value in the “Customer Name” field of the
organization.
<-passwdNotice->
Password help text that is customized according to authentication method.
Not applicable to cross-authentication.
<-initialPassword->
Assigns an initial password upon user account creation, only if using PMP
authentication. (Do not use this token when using other authentication
methods such as cross-authentication.)
<-loginhost->
The current login URL for accessing a user's Message Center.
To send users to the standard login page, a compound string is required
within your notification message for generating the correct URL and inserting
the user's ID in the login page. The complete string would look as follows:
http://<-loginhost->/exec/login?email=<-address->