Case 1: An entry in the authentication server can be mapped to an entry in the pass-through server

Edit online

For an entry that does not contain a mapping entry in the pass-through server, you must add the ibm-ptaReferral auxiliary object class to the entry.

For example, to map the uid=Tom396 entry with the userPrincipalName=Tom456 entry in the pass-through server the entry must contain the following values:

dn: cn=Tom Brown1,o=sample
cn: Tom
sn: Brown1
uid: Tom396
objectclass: organizationalPerson
objectclass: person
objectclass: top
objectclass: inetOrgPerson
objectclass: ibm-ptaReferral
ibm-ptaLinkAttribute: userPrincipalName
ibm-ptaLinkValue: Tom456