UID mask for single factor credentials
The UID Mask field is used to specify which attributes are used as credentials. The default value for UID
mask is shown in the following example.
In the preceding example, the UID mask value indicates that a single attribute, sAMAccountName, is
being used in the credentials. The mask is set to %1, which refers to the first token entered by the user into
the user name field of the login dialog of the client application. The contents of the user name field is
parsed into tokens using the following characters as token delimiters: @, !, and &.
LDAP client behavior overview 299