After choosing a datastore, you can indicate where in the datastore user and group records exist so PingFederate can create, read, update, or delete or disable them.
These settings can be configured on the Location tab.
This tab appears only if you are configuring an LDAP user store for provisioning.
Enter the base distinguished name (DN) of the tree structure where user records are
stored in the Base DN field.
PingFederate looks only at this node level or below it for user accounts that need provisioning