---
title: Configuring global sensitive attributes
description: The PingDirectory server supports the ability to define sensitive attributes as a global configuration option so that they're automatically used across all client connection policies.
component: pingdirectory
version: 11.0
page_id: pingdirectory:pingdirectory_server_administration_guide:pd_ds_config_global_sensitive_attribute
canonical_url: https://docs.pingidentity.com/pingdirectory/11.0/pingdirectory_server_administration_guide/pd_ds_config_global_sensitive_attribute.html
revdate: September 13, 2023
section_ids:
  about-this-task: About this task
  steps: Steps
  example: Example:
---

# Configuring global sensitive attributes

The PingDirectory server supports the ability to define sensitive attributes as a global configuration option so that they're automatically used across all client connection policies.

## About this task

Administrators can assign one or more sensitive attribute definitions to a client connection policy.

|   |                                                                                                                                                                           |
| - | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|   | When working in an environment with multiple client connection policies, it can be easy to add a sensitive attribute definition to one policy but overlook it in another. |

## Steps

* To add a global sensitive attribute across all client connection policies, run the `dsconfig` tool.

  ### Example:

  The following command adds the `employeeSSN` as a global sensitive attribute, which is applied across all client connection policies.

  ```shell
  $ bin/dsconfig set-global-configuration-prop --add "sensitive-attribute:employeeSSN"
  ```