Configuration Guides › Policy Server Configuration Guide › Authentication Schemes › Certificate Mapping for X.509 Client Authentication Schemes › Custom Mapping Expressions › Map to the Certificate Serial Number or IssuerDN

Map to the Certificate Serial Number or IssuerDN

Certificate Mapping supports mapping of the CertSerialNumber and IssuerDN attributes, which are not part of the subjectDN. These attribute(s) in the subjectDN of user certificates can be mapped to default or custom user-attribute(s), such as UID or CN in the user directory.

To map these attributes, add the following in the Mapping Expressions field in the Certificate Mapping pane:

• CustomAttributeinLDAP1 = %{CertSerialNumber}