product icon

Step #5: Check the custom attribute configuration

    You can use the ADSI Edit tool to check the properties of your custom attribute to confirm that it has been configured properly.

    1. On your Active Directory server, run the Command Prompt as an administrator.
    2. Enter the following command: adsiedit.msc
      Note:  If the ADSI Edit tool is not available, then you can register it by opening the Command Prompt as an administrator and running the following commands: regsvr32 adsiedit.dll then adsiedit.msc
    3. Connect to the "well known Naming Context": Schema.
    4. Locate the custom attribute and open Properties.
    5. Locate the following attributes, their values should match the following (as shown below):
      • attributeSyntax: 2.5.5.4 = ( NOCASE_STRING )
      • searchFlags: 0X80 = ( CONFIDENTIAL )
      Correctly Configured:
      SearchFlags with Confidential value
      Warning: If the searchFlags attribute is not configured as CONFIDENTIAL (e.g., displays as INDEX), then you must configure it as CONFIDENTIAL.
      Incorrectly Configured:
      searchFlags with INDEX value
    Parent article: Troubleshooting federated login for Active Directory Federation Services (AD FS)
    Previous article: Step #4: Check that the AD FS plugin is installed and registered with the correct custom attribute value
    Next article: Step #6: Check that the custom attribute is populated