A Identity Manager confirmation rule may reference the following attributes:
account — The attributes from the Active Sync account
user — The User view
A Service Provider confirmation rule sets the same attributes, but the contents of the user attribute contains only the user attributes stored in the directory. It will not contain a full IDMXUser view.