Federation Security Services Guide › Configure SiteMinder as an Account Partner › Select Users for Which Assertions Will Be Generated › Add Users by Manual Entry for Resource Partner Access

Add Users by Manual Entry for Resource Partner Access

From the Users/Groups dialog, you can use the Manual Entry option to add users who can access the Resource Partner resources.

To add a user by manual entry

1. In the Manual Entry section, do one of the following:
   • For LDAP directories, enter a valid DN

     For each DN, you can select an action from the Action drop-down list, as follows:

     Search Users--the LDAP search is limited to matches in user entries.

     Search Groups--the LDAP search is limited to matches in group entries.

     Search Organizations--the LDAP search is limited to matches in organization entries.

     Search Any Entry--the LDAP search is limited to matches in user, group, and organization entries.

     Validate DN--the LDAP search locates this DN in the directory.

   • For Microsoft SQL Server, Oracle and WinNT directories, enter a user name in the Manual Entry field.

     For a Microsoft SQL Server or Oracle, you can enter a SQL query instead. For example:

     SELECT NAME FROM EMPLOYEE WHERE JOB =’MGR’;

     The Policy Server performs the query as the database user-specified in the Username field of the Credentials and Connection tab for the user directory. When constructing the SQL statement for the Manual Entry field, familiarize yourself with the database schema for the user directory. For example, if you are using the SmSampleUsers schema and want to add specific users, you could select a user entry from the SmUser table.

   Note: For an LDAP directory, you can enter all in the Manual Entry field to add all directory entries to the Resource Partner.

2. Click Add to Current Members.
3. Click OK to save your changes.