Skip to content

User Attributes

User attributes are a powerful building block when creating policies, allowing you to create expressive policies that utilize the user's information when making policy decisions.

User attributes can come from a variety of sources, such as Active Directory/LDAP or from custom scripts:

Read more here about how to configure Okera to read user attributes from:

  1. Microsoft Active Directory (AD)/LDAP
  2. Custom script

Note

It is possible to configure multiple user attribute sources, and they will compose, with the following priority (a higher priority means a user attribute from that source will override one from a lower-priority source):

  1. Custom scripts
  2. AD/LDAP