Policy Server Guides › Policy Server Configuration Guide › User Directories › User Attribute Mapping › Define an Attribute Mapping › Mask › Create a Mask Attribute Mapping

Create a Mask Attribute Mapping

You can map a common name to a bit pattern whose user attribute name is specified by the user directory's underlying schema. The result of a mask attribute mapping is a Boolean value. You can use a mask mapping to read or change a user attribute value in a user directory. User attribute mappings are directory-specific.

To Create a User Attribute Mapping of Type Mask

1. Navigate to the User Directory: Name pane.
2. Click Create on the Attribute Mapping List group box.

   The Create Attribute Mapping pane opens.

3. Verify that Create a new object is selected, and click OK.

   The Create Attribute Mapping: Name pane opens.

4. Type the common name and a description of the attribute mapping in the fields on the General group box.

   Note: Common names must conform to the same rules as user attribute names.

5. Select Mask on the Properties group box.
6. Type the definition in the Definition box on the Properties group box.
   • Example:

     Name: IsDisabled

     Definition: AccountStatus:4

     Description:

     The common name IsDisabled is mapped to the user attribute name AccountStatus. AccountStatus stores one or more states in a bit pattern. For example, AccountStatus stores the account state in the third bit. When the account is disabled, the third bit is set to 1. Conversely, when the account is enabled, the third bit is set to 0.

     SiteMinder performs a bitwise AND operation on AccountStatus and the specified state or mask, which in this example is 4, to determine whether the account is disabled. If the account is disabled, IsDisabled is TRUE.

7. (Optional) Select Disabled to disable this attribute mapping.
8. Click OK.

   The Create Attribute Mapping task is submitted for processing, and the new attribute mapping is added to the list on the Attribute Mapping List group box.