Configure Disambiguation Locally

To locate a user record in a local user directory you have to disambiguate the user. Disambiguation is a two-step process:

Obtain the LoginID--either by the default behavior of extracting it from the assertion or by using an Xpath query.
Using the LoginID, locate the user in the user store--either by the default behavior of passing the LoginID to the Policy Server or using a search specification.

Note: The use of Xpath and search specification are optional.