Indexing client attributes in PingDirectory
If you use PingDirectory, or another directory, to store OAuth client records for PingFederate, you must index the client attributes.
About this task
Index these OAuth client attributes using the procedure below.
Attribute name | Index type |
---|---|
|
equality |
|
ordering |
|
substring |
|
equality |
|
ordering |
|
substring |
|
ordering |
Steps
-
Create the indexes using the PingDirectory
dsconfig
utility.The
dsconfig
utility is interactive, letting you enter command arguments. The following example creates the three indexes for thepf-oauth-client-id
attribute.$ bin/dsconfig create-local-db-index \ --backend-name userRoot \ --index-name pf-oauth-client-id \ --set index-type:equality \ --set index-type:ordering \ --set index-type:substring
-
After creating the indexes, build them using the
rebuild-index
utility.The following example builds the required indexes.
$ bin/rebuild-index \ --baseDN "dc=example,dc=com" \ --index pf-oauth-client-id \ --index pf-oauth-client-name \ --index pf-oauth-client-last-modified