title: How does Keycloak use the LDAP attributes defined in User Federation?
body: <p>In setting up User Federation from an LDAP provider, there are three LDAP attributes:</p>
  
  <ul>
  <li>Username LDAP attribute</li>
  <li>RDN LDAP attribute</li>
  <li>UUID LDAP attribute</li>
  </ul>
  
  <p>How does the value of each of these impact Keycloak or the sync process?</p>
  
  <p>For instance, if the directory ensures unique email addresses, are there any negatives to using mail as the UUID LDAP attribute?</p>
  
  <p>Where can I find details on each of these attributes--specific to Keycloak?</p>