+

Search Tips   |   Advanced Search

Configure LDAP attributes in a federated repository configuration

Follow this task to add, modify, or delete the configuration of supported, unsupported, and external LDAP attributes in a federated repositories configuration.


Tasks

  1. In the administrative console, click...

      Security > Global security > User account repository > Available realm definitions > Federated repositories > Configure

    To configure for a specific domain in a multiple security domain environment, click Security domains > domain_name. Under Security Attributes, expand User Realm, and click Customize for this domain. Select the Realm type as Federated repositories and then click Configure.

  2. Under Related items, click Manage repositories, and then in the panel that appears, click the repository_id of the LDAP repository.

  3. Under Additional properties, click the LDAP attributes link.

  4. To add a new LDAP attribute configuration, click Add and select one of the following options:

    • Select Supported to add a supported LDAP attribute configuration. On the panel that appears, enter the following details:

      Name

      Name of the LDAP attribute used in the repository LDAP adapter.

      Property name

      Name of the corresponding federated repository property.

      Syntax

      Syntax of the LDAP attribute. The default is string. For example, the syntax of the unicodePwd LDAP attribute is octetString.

      Entity types

      Entity type that applies the attribute mapping.

      Default value

      Default value of the LDAP attribute.

      Default attribute

      Default attribute of the LDAP attribute.

    • Select Unsupported to add a configuration for a federated repository property that the LDAP repository does not support. On the panel that appears, enter the following details:

      Property name

      Name of the federated repository property.

      Entity types

      One or more entity types. Use the semicolon (;) as the delimiter to specify multiple entity types.

    • Select External to add a configuration for an LDAP attribute used as an external ID in the specified LDAP repository. On the panel that appears, enter the following details:

      Name

      Name of the external ID attribute of the LDAP repository.

      Syntax

      Syntax of the LDAP attribute. The default is string. For example, the syntax of the unicodePwd LDAP attribute is octetString.

      Entity types

      One or more entity types. Use the semicolon (;) as the delimiter to specify multiple entity types.

      Generate value

      Specifies whether or not the federated repository should generate the value of the LDAP attribute.

  5. To modify an existing configuration, click the Name/Property Name link and modify the details in the panel that appears.

  6. To delete an existing configuration, select the checkbox for the Name/Property Name and click Delete.

  7. Click OK and Save to the master configuration.

  8. Restart the application server.

After completing these steps, LDAP attributes are configured in the federated repositories configuration.


Subtopics

Related reference:

  • IdMgrRepositoryConfig