Search filter used with secondary LDAP directory

Choose the method for obtaining user names from your secondary LDAP directory.

• Use value derived from the UPN.

  When using a secondary LDAP directory, "auser" is used as the derived value to look up another value in the secondary directory that contains the user's name.

  For instance, a search filter could be created for a secondary lookup, where “(some attribute in 2ndary=auser)”

  Enter the attribute from the secondary directory.

• Alternatively, Automated Sign-On can use a value of another attribute in the authenticating directory as the value in the search filter to find the object in the secondary LDAP directory containing the user's name.

  Enter the attributes for both the authenticating and the secondary LDAP directories.

More information

• DCAS Servers (for z/OS systems)
• User Principal Name (UPN)
• Secondary LDAP directory
• Check the client and host settings