Novell ACCESS MANAGER 3.1 SP2 - README 2010, Руководство пользователя

Страница: 294 / 374

294 Novell Access Manager 3.1 SP2 Identity Server Guide
n
ov
do
cx (e
n)
16
Ap
ril 20
10
Selected Read Locations: The list of selected locations from which the system reads attributes
containing profile data. If you add multiple entries to this list, the system searches attributes in
each location in the order you specify. When a match is found for an attribute, the other
locations are not searched. Use the up/down and left/right arrows to control which locations are
selected and the order in which to read them. Read locations can include:
 Configuration Datastore: Liberty attribute values can be stored in the configuration store
of the Administration Console. If your users have access to the User Portal, they can add
values to a number of Liberty attributes.
 LDAP Data Mappings: If you have mapped a Liberty attribute to an LDAP attribute in
your user store, the values can be read from the LDAP user store. To create LDAP
attribute maps, see
Section 13.6, “Mapping LDAP and Liberty Attributes,” on page 304 .
 Remote Attributes: If you set up federation, the Identity Server can read attributes from
these remote service providers. Sometimes, the service provider is set up to push a set of
attribute values when the user logs in. These pushed attributes are cached, and the Identity
Server can quickly read them. If a requested attribute has not been pushed, a request for
the Liberty attribute is sent to remote service provider. This can be time consuming,
especially if the user has federated with more than one remote service provider.
Remote
Attributes should always be the last item in this list.
Available Read Locations: The list of available locations from which the system can read
attributes containing profile data. Locations in this list are currently not being used.