Policy Server Guides › Policy Design Guide › Policies › Policy Processing › Sample SiteMinder Configuration with Nested Realms › User Directory

User Directory

Assume that the policy domain that contains the policies and other relevant Policy Server objects includes a connection to the LDAP user directory in the following diagram.

The sample user directory contains the following:

o=myorg.org

This is an organization.

ou=people

This is an organizational unit that contains information for all employees.

employee<n>

These are directory entries for each employee. Note that a_lvl is a user attribute that indicates an access level. For the purpose of the examples in this section, assume that employee1 and employee2 have an access level of zero (a_lvl=0).

cn=employees

This is a group that contains all company employees as its members.

cn=managers

This is a group that contains all employees with a managerial title as its members. Note that employee3 and employee4 are the only employees in this group, and their respective access levels are greater than zero.