This parameter allows a user to login to an realm identified as the specified domain. The specified domain must match the value defined in the Domain Name attribute of the realm’s profile. For example:
A user who is not already a member of the specified domain/realm will receive an error message when they attempt to authenticate with the org parameter. A user profile, though, can be dynamically created in the Directory Server if all of the following points are TRUE:
The User Profile attribute in the Core Authentication Service must be set to Dynamic or Dynamic With User Alias .
The user must successfully authenticate to the required module.
The user does not already have a profile in Directory Server.