dn format

<dn-format> element

The <dn-format> instructs the MA on how to construct a DN for the specified object. It is common on UNIX and linux systems for groups and users to have the same name, and as FIM does not allow multiple connector space objects to share the same DN, a mechanism must be provided for the MA to provide FIM with a unique DN.

The inner text of the element must contain a valid value declaration.

If the MA is only being used to import a single object type, a simple DN may be used (for example, using only the accountName).

Example

<dn-format>{accountName}</dn-format>

If there is a possibility of multiple object types sharing the name unique identifier, then a DN must be constructed using other information. It is recommended to use an LDAP-style DN for each object type

Example

<dn-format>cn={accountName},ou=users</dn-format>