Administration Console

9.2.4.6
- 9.2.5

Back Next

User and Group Attribute Mapping

When looking up a user or group in an LDAP or JDBC-based Identity service, Process Server search procedure includes several basic identity attributes. For users and groups, these are:

Users

person

memberOf (recommended, if Identity service supports it)

userName (required)

firstName

lastName

Groups

groupName (required)

member (required for LDAP)

This generic model applies to any Identity service, and you can use it as is, or delete the optional attributes from the model.

The

memberOf

Users attribute is recommended for making searches for group members more efficient, especially where a user is a member of more than one group. Be sure to map a user as

memberOf

all relevant groups and add the user as a

member

in relevant Groups.

If desired, you can add many other search attributes to the basic model, and then use these attributes in LDAP or JDBC people queries from within a BPEL process People activity. When you add a search attribute from your Identity service, you must map it to a new attribute that gets added to the Process Server search model.

For example, if your Identity service includes a

loginCount

attribute, you can add that to the Users or Groups attribute mapping page. The attributes can be loaded into the Process Developer Process Deployment Descriptor Editor, where a developer has access to them for creating Logical People Group queries. For details on using identity attributes in Process Developer, see Logical People Group Queries
in Process Develope
r Help.

To Add an Attribute Mapping:

On the Users or Groups tab of the Identity Service, select Add Attribute
.

In the Provider Attribute/Column Name column, type in the name of an existing attribute that is in your identity store.

In the Model Attribute column, type in the same name or alias for the attribute.

Select the data type from the list. The list contains all types defined by the search model, based on the Higgins Open Source Identity Framework. (The Process Server uses Higgins to enable the adding of identity attributes to the search model.) Note that the list also contains two custom types,

GroupReference

and

PersonReference

. Use one of these types if you want to reference a group or user by name, rather than by the full distinguished name or primary key defined in the data store.

To Delete an Attribute Mapping:

Select the checkbox next to the Model Attribute field.

Select Update
. The attribute is removed.

Identity Service

Download Guide

Watch

Comments

Communities

Knowledge Base

Success Portal