User Attributes

User attributes are a powerful building block when creating policies, allowing you to create expressive policies that utilize the user's information when making policy decisions.

User attributes can come from a variety of sources, such as Active Directory/LDAP or from custom scripts:

Read more here about how to configure Okera to read user attributes from:

1. Microsoft Active Directory (AD)/LDAP
2. Custom script

It is possible to configure multiple user attribute sources, and they will be configured with the following priority (a higher priority means a user attribute from that source will override one from a lower-priority source):

1. Custom scripts
2. Microsoft Active Directory (AD)/LDAP