User attributes are a powerful building block when creating policies, allowing you to create expressive policies that utilize the user's information when making policy decisions.
User attributes can come from a variety of sources, such as Active Directory/LDAP or from custom scripts:
Read more here about how to configure Okera to read user attributes from:
It is possible to configure multiple user attribute sources, and they will be configured with the following priority (a higher priority means a user attribute from that source will override one from a lower-priority source):
- Custom scripts
- Microsoft Active Directory (AD)/LDAP