Configuring global sensitive attributes - PingDirectory

Page created: 26 Jul 2021 |

Page updated: 14 Jan 2022

| 1 min read

9.0 Product PingDirectory Directory Capability Product documentation Content Type Administration User task Configuration IT Administrator Administrator Audience Software Deployment Method

The Directory Server supports the ability to define sensitive attributes as a global configuration option so that they're automatically used across all client connection policies.

Administrators can assign one or more sensitive attribute definitions to a client connection policy.

Note:

When working in an environment with multiple client connection policies, it can be easy to add a sensitive attribute definition to one policy but overlook it in another.

To add a global sensitive attribute across all client connection policies, run the dsconfig tool.
The following command adds the employeeSSN as a global sensitive attribute, which is applied across all client connection policies.
```
$ bin/dsconfig set-global-configuration-prop --add "sensitive-attribute:employeeSSN"
```