Security

Dear Experts, 

 

Is it possible to add attribute value of Department in all the users being created in local database and then later use it during the role mapping process? 

 

like with AD, we can have a role mapping policy like this

 

authorization:AD1 Department Equals Sales

Can we do the same for Local User database?

yes

Ok...

Any idea how to?

I added the attribute and tried to use it in RM but it was not showing up

Did you add the Local User repos as an authorization source?

It was added as authentication source. Will it be allowed to be added as
authorization source also?

yes

I dnt think so since it gives the message that its already added as
authentication source.

But if u r sure, let me try again

Best way to look at is that authentication (authN) is to make sure the account is valid. Authz is to look at the users attributes.

Thanks Troy, 

 

I was selecting authorization:local user respository. 

 

Thanks again

The user's department and group members will be available as sales roles for evaluation by the enforcement policy.

I am talking about local user database. Not AD