It is possible to configure mapping of user certificates to altSecurityIdentities attribute in Active Directory. In order to configure support for this feature it needs to be enabled in the particular card template that this feature is to be used.
Important: This feature is currently supported for MS Active Directory only.
1. From Templates - Card Templates select an existing template and click Edit.
2. Click the link for Issue Card. In the Enroll Certificates section when you either add a certificate or edit an existing certificate in the table where the particular certificate needs to be mapped to altSecurityIdentities attribute then enable the Update (altSecurityIdentities) check box .
3. It is important that the AD connection that you are connecting with for the particular template has write permissions. From Options - Connections ensure that you have configured a connection to AD with a credential that has appropriate permissions to write to the altSecurityIdentities attribute.