User Directory configuration allowing two user attributes for authentication

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On

Issue/Introduction

Can you create a User Directory with filter having two attributes for ID-From-Login

Environment requires the user to be able log in with the uid or email address.

Even after creating a search filter to login with both Email ID/UID in User Directory definition, it does not get resolved to the ID entered by the user (ID-From-Login).

Is there a way to authenticate users with Email address or UID?

 

Resolution

There are two possible methods:

1. Create two User Directory definitions (Both can be pointed to the same user directory).
   
   For the 1st User Directory use a user search filter as uid= and for the 2nd User Directory use email=, in LDAP User DN Lookup, for example.
   
   
2. You can use SmWalker which is a Global Delivery Module to get this to work.
   
   This option can be arranged through your account director and is not supported by the support team.