Policy Server Guides › Policy Server Configuration Guide › Authentication Schemes › Certificate Mapping › Custom Mapping Expressions

Custom Mapping Expressions

You can use custom mapping expressions for complex multiple attribute mapping. This allows you to specify multiple user attributes that should be extracted from a user DN to establish a certificate mapping.

Note: Custom mapping expressions are also useful when simulating certificate-based authentications through authentication the SiteMinder Test Tool.

The syntax for a custom mapping expression is a parsing specification designed to enable full mapping flexibility. It indicates which information to take from the certificate and where it should be applied to in the user directory. The basic syntax is as follows:

UserAttribute=%{CertificateAttribute},
UserAttribute2=%{CertificateAttribute}