000036610 - Adding a new user attribute in a user profile in RSA Authentication Manager 8.x

While this article refers to steps to add an attribute for Active Directory, similar steps can be used with any external identity source supported with Authentication Manager.

To add a new user attribute in Authentication Manager

1. Login to the Security Console on the primary Authentication Manager server as a super admin.
2. Click on Identity > Identity Attribute Definition > Add New.
3. Under Identity Attribute Definition Basics, add the new Attribute Name and complete the other fields as desired.
4. Under Format, add the Data Type, and other information as needed.
5. Under Options, for Attribute Storage choose Store this attribute in the same location as the user record (internal database or external identity source).
6. Under Identity Source Mapping:
   
   • For the internal database: Define the attribute name you want to be saved in the database.
   • For Active Directory: Provide the attribute name from the Active Directory to be mapped.  Check the steps below on how to get the attribute name from Active Directory.
7. Click Save. This new attribute is now seen when creating new users or when viewing existing user profiles.

How to get the attribute name in Active Directory 

1. Logon to the Windows machine of this Active Directory.
2. Open Active Directory Users and Computers.
3. Click on View > Advanced Features.
4. Go to any user you have mapped. 
5. Right click on the user and select Properties.
6. Click on Attribute Editor. 
7. Search for the attribute value you want to map and take a note of the attribute name.  The screenshot below shows the Job Title attribute named here as title:

8. Key in the correct attribute name in the Identity Source Mapping field for either the internal database or your external identity source.

For the internal database, the attribute will be created.  For an external identity source, the attribute must already exist, and is read-only.

8. Click Save or Save & Add Another.