Policy Server Guides › Policy Server Configuration Guide › Authentication Schemes › MS Passport Authentication Schemes › Map Search Specifications for Passport Authentication

Map Search Specifications for Passport Authentication

You configure a search specification so SiteMinder can recognize the identity established through Microsoft^® .NET Passport. The search specification lets SiteMinder locate the Passport Unique ID (PUID) in a user directory.

You can configure a search specification for the following namespaces:

• LDAP
• ODBC
• Custom

Note: SiteMinder does not support Passport authentication using a WinNT user directory.

To map a search specification for a namespace

1. Open the MS Passport Authentication scheme that you want.
2. Enter a mapping in the respective directory field in the Scheme Setup group box.

   Mappings should be configured as follows:

   • LDAP:

     altSecurityIdentities=Kerberos:%s@company.local
     

   • ODBC:

     PassportUID=PUID:%s@company.local
     

   • Custom:

     PassportUID=PUID:%s@company.local
     

   Note: The authentication scheme can be configured to provide a search specification for one or more directory types.

3. Click Submit.

   The search specification is saved.