Document-level security - User attributes from LDAP

Hello,

We have started to use ABAC as described in the documentation: https://opendistro.github.io/for-elasticsearch-docs/docs/security-access-control/document-level-security/

With some workaround, it works in our case: Document-level security - Multiple attributes based access

And now we consider to use LDAP users instead of the internal ones.
Is there a way to use somehow LDAP user attributes how we use it for the internal ones?

Thank you!

@stmx38
Did you manage to get this working?

The LDAP attributes can be used for DLS as below:

dls: ‘{“term” : {“tel”: “${attr.ldap.department}”}}’

further docs are available here