---
title: Configuring LDAP in Ivanti EPMM for session revocation
slug: access/guide/configuring-ldap-in-ivanti-epmm-for-session-revocation
docTags: 
createdAt: 2026-09-07T09:11:00.717Z
---

Configure one or all of the following custom attributes in the LDAP configuration in Ivanti EPMM:

- userPrincipalName
- objectGUID

**Procedure **

1. In the Ivanti EPMM Admin Portal, go to Services > LDAP.
2. Select an LDAP server and click the Edit icon.
   Figure 1. Edit LDAP server

::Image[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/cT9gb6-K_neTKVeAbFZhc_configldapcoresrs.png" position="flex-start" size="75" width="753" height="455" initialPath="../Resources/Images/ConfigLdapCoreSrs.png" githubPath="HTML5/Resources/Images/ConfigLdapCoreSrs.png" showCaption="false"}

3. In the Modifying LDAP Setting page, scroll down to Custom Attributes.
4. Enter one or both of the following custom attributes:
   - userPrincipalName
   - objectGUID

Use an available custom field or click Create New Custom Attribute to add a new custom field.

5. Click Save.

Related topics 

- For information about configuring LDAP in Ivanti EPMM, see "Configuring LDAP servers" in theGetting Started with Ivanti EPMM Guide*.*
- [Configuring Session Revocation](docId\:V2gH7kdQRzUSoWtNaOWeg)