The PingDirectory server's support for virtual attributes is a useful facility that dynamically generates values in entries for a wide range of use cases. These values are used to generate key operational attributes such as:

  • entryDN
  • subschemaSubentry
  • isMemberOf
  • numSubordinates
  • hasSubordinates
  • ds-entry-checksum

The values of other attributes in the same or different entries can be mirrored, and values can be constructed from other attributes in the same entry. Items such as password policies and privileges can be dynamically generated, and you can create custom virtual attribute providers with the Server SDK using a wide variety of logic.

Virtual attributes should not be used for all use cases. Composed attributes, which complement virtual attributes, are more suited for scenarios that virtual attributes do not support.