Version: 1.7
Category: Process
Extended Category: LDAP
Action Package: Standard Actions
Description
Search for and replace an attribute with a matching LDAP DN, the LDAP DN is searched for using the existing attribute value to match any LDAP attribute on the target object. The matched DN will replace the existing session attribute value.
This works for both single and multivalue session attributes.
|
Parameter |
Description |
Example |
|
Target Data Source |
Select an LDAP data source |
AD |
|
Search Base DN |
The search base for matching. Supports SESSION() and GLOBAL(). |
dc=Company,dc=local |
|
Session Attribute to Convert |
The session objects attribute to convert by matching with LDAP |
memberOf |
|
Match Value to LDAP Attribute |
The LDAP objects attribute to match against the session object value |
sAMAccountName |
|
Optional Search Filter |
An optional LDAP search filter to append |
objectclass=group |
|
Remove or Ignore Unmatched |
Should unmatched values be ignored or removed from the session attribute? (remove or ignore, default: remove) |
ignore |
|
Source DNs Matching Attribute |
The source objects matching attribute value, if empty the naming value from the DN will be used. |
cn |
Use Cases
Example 1: Get DN from manager
Get the managers DN from Active Directory, this value will be saved to the user account when created in Active Directory.
|
Parameter |
Value |
|
Target Data Source |
AD |
|
Search Base DN |
dc=Company,dc=local |
|
Session Attribute to Convert |
manager |
|
Match Value to LDAP Attribute |
sAMAccountName |
|
Optional Search Filter |
objectClass=user |
|
Remove or Ignore Unmatched |
[BLANK] |
|
Source DNs Matching Attribute |
[BLANK] |
DISCLAIMER
Information provided in this document is for your information only. PhenixID makes no explicit or implied claims to the validity of this information. Any trademarks referenced in this document are the property of their respective owners.The origin of this information may be internal or external to PhenixID. PhenixID makes all reasonable efforts to verify this information.
PhenixID - support.phenixid.se