On the Attributes screen, select the datastore attributes you want to provision.


This screen appears only if you are configuring an LDAP user store for provisioning and the User and Group Support option is selected on the Connection Type screen.

Several attributes are managed internally by PingFederate and do not require mapping:
  • objectClass
  • objectGUID
  • member

You can override the internal management of objectClass by selecting and mapping it to a SCIM attribute on the Attribute Fulfillment screen. In this case, the values you supply are used. The objectGUID and member attributes cannot be overridden and are ignored if selected.

  1. Select a root object class and an attribute from the lists, then click Add Attribute.
  2. Repeat the previous step for each attribute requiring provisioning.