PingFederate Server Administrator’s Reference Guide Service provider SSO configuration Managing IdP connections Configuring just-in-time provisioning Specifying an LDAP user-record location Expand/Collapse All Specifying an LDAP user-record location After choosing a datastore, indicate where in the store PingFederate should write new user records or update existing ones. About this task The Location tab appears only when an LDAP datastore is chosen on the User Repository tab. Steps Enter the base distinguished name (DN) in the Base DN field. A base DN is the DN of the tree structure in which the search begins. Leave this field blank if records are located at the LDAP root. Identifying the user repository Entering an LDAP filter