Contents    

Liberty Personal Profile Service Attributes

The Liberty Personal Profile service attributes are global attributes. The values applied to them are applied across the Sun Java System Identity Server configuration and are inherited by every configured organization. (They can not be applied directly to roles or organizations as the goal of global attributes is to customize the Identity Server application.)

The Liberty Personal Profile Service Attributes are:

Resource ID Mapper

This attribute specifies the mutual implementation of a resourceID to the User DN.

Authorizer

This attribute defines the default implementation of the Personal Profile Service service authorization.

Attribute Mapper

This attribute defines the mapping between a Liberty Personal Profile service attribute to a user attribute. Format:

LibertyPersonalProfileAttribute=IdentityServerAttribute

For example:

AltCN=SunIdentityServerPPCommonNameAltCN

Provider ID

This attribute defines the unique identifier used for this Liberty Personal Profile Service. For example:

http://example.com:58080/amserver/Liberty/idpp

Name Scheme

This attribute defines the naming scheme that will be used for the Liberty Personal Profile Service common name. For example, you can specify first and last name, or first, middle and last name.

Namespace Prefix

This attribute specifies the namespace prefix to be used for Liberty Personal Profile Service XML protocol messages. NameSpace is used to differentiate the elements that come from different XML schemas. Namespace prefix is a prefix to the element and will be useful to define XML metadata from different XML schema namespaces.

Supported Containers

This attribute defines the list of supported Personal Profile containers. To add a container, click the Add button. Enter the key value pair in the provided fields and click OK.

PPLDAP Attribute Map List

This attribute list specifies the mapping for the Personal Profile attributes defined in the Liberty II specification to the Identity Server Personal Profile service attributes.

For example, in the mapping scheme, JobTitle=sunIdentityServerPPEmploymentIdentityJobTitle, sunIdentityServerPPEmploymentIdentityJobTitle is the Identity Server attribute that maps to the Liberty Protocol’s JobTitle attribute.

Require Query PolicyEval

If selected, this option requires a policy evaluation to be performed for Personal Profile service queries.

Require Modify PolicyEval

If selected, this option requires a policy evaluation to be performed for Personal Profile service modifications.

Extension Container Attributes

This attribute specifies the list of extension container attributes for the Personal Profile service.

Extension Attributes Namespace Prefix

This attribute defines the namespace prefix for the extensions defined in Extension Container Attributes.


Contents