When a new user logs in to a station for the first time, the system automatically creates a new user account (component) in the station. It uses the user name that the person logged in with (the person’s user login name on the LDAP server) as the account name. The system populates (maps) this component’s properties from two sources:
One of those attributes identifies the group within your organization to which the user belongs. This attribute is the Attr Prototype.
Attr Prototype name to identify the user prototype in the station from which to populate the component’s local user properties, including
user permissions, facets, Nav file, default Web and Mobile profiles, and other specific properties required by a station.For Active Directory, this is the memberOf attribute.
Attr Prototype in the LDAP server must exactly match the name of a user prototype in the station.
Attr Prototype does not match a user prototype name or this property is blank, the system uses the Default Prototype as its source.An LDAP user may be a member of multiple groups.