Alternate authorization identities are specified by the authz-attribute property of the entry-balancing request processor configuration object. By default, the authz-attribute property has the default value of ds-authz-map-to-dn, which is an attribute reserved for this purpose.