For each serviceConnectionPoint object in the zone, there is a link back to the corresponding Active Directory object that owns the serviceConnectionPoint object. This link is stored in one of two ways:
- Using the ParentLink pseudo-attribute. This attribute contains the string security identifier (SID) of the parent Active Directory object. This attribute is used in Centrify, version 3.x and later.
- Using the managedBy Active Directory attribute. This attribute is set to the distinguished name (DN) of the parent object. This attribute was used in Centrify, version 2.x, but discontinued because there are cases when it is not possible to set the managedBy attribute.