User guide

LDAP client behavior overview 236
UID mask for multiple factor credentials
For added security, an administrator might want to implement a policy that says authentication is based
on UPN, password, and employeeID. In other words, the user logging in must know the UPN, password,
and employeeID. The UID mask must be changed to indicate there are two attributes used as the "user
name." The two attributes are separated by a # in the UID mask, as shown in the following figure.