Configuring global sensitive attributes - PingDirectory - 9.0

PingDirectory

bundle
pingdirectory-90
ft:publication_title
PingDirectory
Product_Version_ce
PingDirectory 9.0
category
Product
pd-90
pingdirectory
ContentType_ce

The Directory Server supports the ability to define sensitive attributes as a global configuration option so that they're automatically used across all client connection policies.

Administrators can assign one or more sensitive attribute definitions to a client connection policy.
Note:

When working in an environment with multiple client connection policies, it can be easy to add a sensitive attribute definition to one policy but overlook it in another.

To add a global sensitive attribute across all client connection policies, run the dsconfig tool.

The following command adds the employeeSSN as a global sensitive attribute, which is applied across all client connection policies.

$ bin/dsconfig set-global-configuration-prop --add "sensitive-attribute:employeeSSN"