Retrieving the user’s Active Directory attributes

The LoginUser object offers a single method, Get(), that can retrieve any one of the current user’s Active Directory attributes. It takes as its argument a string that specifies the key of the attribute to retrieve. LoginUser.Get(“mail”), for example, returns the user’s email address as stored in Active Directory.

When LoginUser.Get() executes, the Privileged Access Service contacts Active Directory through the connector for the user’s organization and retrieves the attribute. If, for example, a user has logged into the Admin Portal as a member of the Acme organization, executing LoginUser.Get() during one of that user’s log-on sessions contacts the Acme Active Directory service through the connector set up in Acme’s internal network.