Handling account attributes
You can view the complete list of attributes that Bravura Security Fabric can manage, including native and pseudo-attributes, using the Manage the system (PSA) module. To do this, select DUO Authentication from the Manage the system > Resources >Account attributes > Target system type menu.
For information about the native DUO Authentication attributes managed by Bravura Security Fabric , consult your DUO Authentication documentation.
Bravura Security Fabric explicitly handles the following attributes and pseudo-attributes when creating or modifying recipient accounts for DUO Authentication target systems:
email Use email to define the email address of the user. This pseudo-attribute should be mapped to the EMAIL profile and request attribute.
firstname Use firstname to define the first name of the user. This pseudo-attribute should be mapped to the FIRST_NAME profile and request attribute.
lastname Use lastname to define the last name of the user. This pseudo-attribute should be mapped to the LAST_NAME profile and request attribute.
realname The realname attribute may be used to create full name for a user to combine the first, middle, and last names to be created or updated on the DUO Authentication web service for the user. A PSLang expression may be used to do so.
See PSLang Expressions for how to create the PSLang expression for the full name.
phones The phones attribute is used for the phone numbers that a user has enrolled on the DUO Authentication web service for themselves that are used for authentication for phone calls, SMS messages, or with the Duo Mobile app for passcodes or push notifications.
This pseudo-attribute should also be mapped to a custom profile and request attribute if it is to be included when creating new DUO users or when viewing or modifying the phone numbers for existing DUO users.
See the Bravura Security Fabric configuration documentation for more information.