Specialized Administration > Ensuring Data Security > Security Labels and Agreements > Configuring Security Labels > Security Label Configuration Steps > Specifying a UFID
  
Specifying a UFID
The syntax for specifying a UFID is as follows:
<DISTINGUISHED_NAME>|<GUID>|<DOMAIN>
where
<DISTINGUISHED_NAME> is the distinguished name of the Windchill participant (user, user-defined group, or organization). The distinguished name is displayed on the information page for the participant in the Participant Administration utility.
<GUID> is the globally unique identifier for the repository where the participant was initially created.
<DOMAIN> is the internet style domain name of the repository where the participant currently resides.
In standard UFIDs, the <GUID> and <DOMAIN> values together represent the identity of the directory service in which the group resides. In Windchill usage, the <GUID> and <DOMAIN> values are identical, each being the name of the directory service in which the group resides. If you do not know the directory service name, it can be found by reversing the value obtained by one of following means:
Viewing the value of Directory Service field when creating the participant. This field is only visible during participant creation using the Participant Administration utility.
Viewing the name of the JNDI adapter used for the directory service as shown in the Info*Engine Administration utility.
Viewing the value of the wt.federation.org.defaultAdapter property in the wt.properties file.
For example, if the value of the Directory Service field when creating the group was com.ptc.Ldap, then the value for the <GUID> and <DOMAIN> values is Ldap.ptc.com.