If you are using the Active Directory or LDAP namespaces in your SiteMinder connection to your user directory, you can define a virtual attribute mapping to a specific object class attribute in that directory. These mappings can help narrow your searches. For example, if your directory schema contains an object class attribute named "computer," you can create a virtual attribute to exclude items containing the "computer" attribute from your search results in the people picker.
To create a custom mapping to filter items containing a particular Object Class attribute from your search results
policy_server_home\config\UserAttrMapping.txt
Specifies the installation directory where your SiteMinder Policy Server is installed. The %NETE_PS_ROOT% environment variable points to this directory.
Default: (Windows) C:\Program Files\CA
UserDirName=ldap-sunone GroupID=cn Email=mail UniversalID=uid DisplayName=cn
FilterClass=object_class_attribute_name
For example, if the name of your object class attribute is "computer," add the following:
FilterClass=computer
The virtual attribute mappings are configured.
| Copyright © 2010 CA. All rights reserved. |
|