Virtual attributes are abstract, dynamically generated attributes that are invoked through an LDAP operation, such as ldapsearch, but are not stored in the PingDirectory server backend.

Most virtual attributes are operational attributes, providing processing-related information that the server requires. The PingDirectory server virtual attribute subsystem allows you to create user-defined virtual attributes to suit your requirements.

For example, you can mirror the values of other attributes (in the same or different entries), and values can be constructed from other attributes in the same entry. Items such as password policies and privileges can be dynamically generated, and you can create custom virtual attribute providers with the Server SDK using a wide variety of logic.