Policy Server Guides › Policy Design Guide › Directory Mapping › Configure a Directory Mapping

Previous Topic: Directory Mapping Overview

Next Topic: Assign an Authorization Directory to a Realm

Configure a Directory Mapping

In order to configure a directory mapping, the user directory connections for both the authentication and authorization directories must be configured in the Policy Server User Interface. For information on configuring a user directory connection, see one of the following:

The following table describes supported types of directory mapping, and the method that can be used to map the authentication directory to the authorization directory.

 

Authorization Directory

Authentication

Directory

LDAP

Relational

Database

WinNT

LDAP

Identical DN
Universal ID

Universal ID

N/A

AD

Identical DN
Universal ID

Universal ID

N/A

Relational

Database

Universal ID

Identical DN
Universal ID

N/A

WinNT

Universal ID

Universal ID

Identical DN

To configure a directory mapping

  1. From the menu bar of the SiteMinder Administration window, select Advanced, Directory Mapping.

    The Directory Mappings dialog opens.

  2. To add a new directory mapping, click Add.

    The Add Directory Mapping dialog opens.

  3. From the Authentication Directory drop-down list, select the directory against which users will be authenticated.
  4. From the Authorization Directory drop-down list, select the directory against which users will be authorized.
  5. In the Mapped DNs group box, select one of the following radio buttons:
    Identical DN

    Maps the user’s distinguished name (DN) exactly from the authentication directory to the authorization directory. For example, if a user is located in an LDAP authentication directory and has a DN of uid=jsmith, ou=people, o=security.com, the exact string is used to locate the user in the authorization directory. Therefore, the authorization directory must contain the DN: uid=jsmith, ou=people, o=security.com.

    Universal ID

    Matches the value of the Universal ID attribute from the authentication directory with the value of the Universal ID field from the authorization directory to identify the user.

  6. Click OK.

    The Policy Server saves your changes and closes the Add Directory Mapping dialog. The new directory mapping appears in the Directory Mapping dialog.

  7. Click OK to close the Directory Mapping dialog.

More information:

Universal IDs