Novell ACCESS MANAGER 3.1 SP2 - IDENTITY SERVER GUIDE 2010 Manual page 294

Selected Read Locations: The list of selected locations from which the system reads attributes
containing profile data. If you add multiple entries to this list, the system searches attributes in
each location in the order you specify. When a match is found for an attribute, the other
locations are not searched. Use the up/down and left/right arrows to control which locations are
selected and the order in which to read them. Read locations can include:
Configuration Datastore: Liberty attribute values can be stored in the configuration store

of the Administration Console. If your users have access to the User Portal, they can add
values to a number of Liberty attributes.
 LDAP Data Mappings: If you have mapped a Liberty attribute to an LDAP attribute in
your user store, the values can be read from the LDAP user store. To create LDAP
attribute maps, see
Remote Attributes: If you set up federation, the Identity Server can read attributes from

these remote service providers. Sometimes, the service provider is set up to push a set of
attribute values when the user logs in. These pushed attributes are cached, and the Identity
Server can quickly read them. If a requested attribute has not been pushed, a request for
the Liberty attribute is sent to remote service provider. This can be time consuming,
especially if the user has federated with more than one remote service provider. Remote
Attributes should always be the last item in this list.
Available Read Locations: The list of available locations from which the system can read
attributes containing profile data. Locations in this list are currently not being used.
294 Novell Access Manager 3.1 SP2 Identity Server Guide
Section 13.6, "Mapping LDAP and Liberty Attributes," on page 304.