Skip navigation.
Downloads | Product Documentation | Support

Administration Console Online Help

# Configure a user name mapper

Before you begin

Review the conceptual information and attribute options for a user name mapper. See Configuring a User Name Mapper

The default user name mapping class only validates that a certificate has not expired. If you require additional validation, you need to write your own user name mapping class. Writing your own user name mapping class also allows you to specify what attribute in the subject DN of the certificate is used to map to the user name. See Configure a custom user name mapper.

To use the default user name mapper:

1. If you have not already done so, in the Change Center of the Administration Console, click Lock & Edit (see Use the Change Center).
2. On the Security Realms page, select the name of the realm you are configuring (for example, TestRealm).
3. Expand Providers > Authentication and select the name of the Default Identity Asserter.
4. Expand Configuration > Provider Specific.
5. Check Use the Default User Name Mapper to enable the user name mapper.
6. Specify the Default User Name Mapper Attribute Type and Default User Name Mapper Attribute Delimiter.
7. Click Save.
8. To activate these changes, in the Change Center of the Administration Console, click Activate Changes.
   Not all changes take effect immediately—some require a restart (see Use the Change Center).