Policy Server Guides › Policy Design Guide › User Directory and Search Dialog Reference › User Directory Dialog › User Directory Dialog—ODBC Namespace › User Directory Dialog—ODBC Namespace—User Attributes Tab

User Directory Dialog—ODBC Namespace—User Attributes Tab

Some SiteMinder features require read or read/write access to directory attributes. This information must be stored in a user directory to which SiteMinder has access. As you configure user directory connections, you must provide the names of certain user profile attributes in the directories. You can specify attributes in the User Attributes tab of the User Directory Dialog.

The attributes you specify must have specific data types. Password Attribute and Password Data require binary attributes, and all others require string attributes.

The attributes in the preceding figure are sample attributes. The attributes that you select for these fields may differ based on your directory type, schema, or preferences.

The attribute(s) you specify must:

• Exist in your database
• Be the correct type (string, binary)
• Not be used to store other types of data (only for read/write attributes)

The following attributes may be configured:

Universal ID field

(Optional) Name of the ODBC user directory attribute SiteMinder uses as the Universal ID.

The Universal ID can be passed to other applications that communicate with SiteMinder in order to maintain the identity of the user. This feature is mainly used as a bridge between SiteMinder and legacy applications which often use attributes other than a user name to identify the user. The attribute you choose must be of the type, string.

Disabled Flag field

(Optional) Name of the ODBC user directory attribute that SiteMinder uses to track disabled users. The attribute you choose must be of the type string.

For information about enabling and disabling user accounts, see the SiteMinder Policy Server Management Guide.

Password Attribute field

(Optional) Name of the ODBC user directory attribute that SiteMinder should use to authenticate a user’s password. The attribute you choose must be of the type binary.

The attribute name you enter in this field must correspond to the location in the ODBC directory that contains user passwords.

Password Data field

(Optional) Name of the user directory attribute that SiteMinder can use for Password Services data.

SiteMinder’s Password Services feature requires a location in the user directory to store a history of user password information. The attribute you choose must be of the type varchar.

More information:

Universal IDs

Password Policies