17.10 - Use Case for Combined IdentityMap and IdentitySearch - Advanced SQL Engine - Teradata Database

Teradata Vantage™ - Advanced SQL Engine Security Administration

Product
Advanced SQL Engine
Teradata Database
Release Number
17.10
Release Date
July 2021
Content Type
Administration
Security
Publication ID
B035-1100-171K
Language
English (United States)

A common use of an identity map with an identity search is when you employ a directory with two trees. In this scenario, each tree defines only a subset of all users, but either tree can authenticate any user. Suppose that:

You have two trees in your directory:

  • Tree A, named dc=div,dc=corp,dc=com and is in Windows domain DIV.
  • Tree B, named dc=newyork,dc=corp,dc=com and is in Windows domain NEWYORK.

You want to allow any of several username formats in logons:

  • UPN, for example, cc444555@div.com
  • The user DN, for example, cn=cc444555,ou=users,dc=newyork,dc=corp,dc=com

You also want to allow users to logon without the domain name, so that the directory can authenticate the following usernames, which require the directory to use the DIV tree:

  • cc444555
  • div\cc444555
  • cc444555@div.corp.com
  • newyork\cc444555
  • cc444555@newyork.corp.com