Configuration Guide › Creating an Identity Manager Directory for an LDAP User Store › User, Group and Organization Managed Object Descriptions › Managed Object Descriptions › Containers › Containers and Well-Known Attributes

Containers and Well-Known Attributes

Well-known attributes are attributes that have special meaning in CA Identity Manager. When CA Identity Manager manages a user store that includes containers, the following well-known attributes identify information about the container:

• %ORG_MEMBERSHIP%

  Identifies the attribute that stores the full name (DN) of the container.

  For example, the full name resembles the following:

  ou=People, ou=Employee, ou=NeteAuto, dc=security, dc=com

• %ORG_MEMBERSHIP_NAME%

  Identifies the attribute that stores the user friendly name of the attribute.

  For example, the user friendly name of the container in the previous example is People.

These well-known attributes appear in the attribute descriptions in the User Object and Group Object sections of the directory.xml file, as follows:

 <ImsManagedObjectAttr physicalname="someattribute" description="Organization" displayname="Organization" valuetype="String" required="true" wellknown="%ORG_MEMBERSHIP%" maxlength="0" permission="WRITEONCE" searchable="false" /> 

For hierarchical user store structures, the physicalname and wellknown parameters are mapped to the well-known attribute as follows:

<ImsManagedObjectAttr physicalname="%ORG_MEMBERSHIP%" description="Organization" displayname="Organization" valuetype="String" required="true" wellknown="%ORG_MEMBERSHIP%" maxlength="0" permission="WRITEONCE" searchable="false" /> 

This indicates that CA Identity Manager automatically derives the container DN and user-friendly name from other information in the directory.xml file.

For flat user store structures, supply the physical attribute names.

Note: See How to Describe a Flat User Directory Structure for instructions.