The LDAP Based Identity Manager populates the PicketBoxSubject by using the information available in an LDAP Directory.
The LDAPBasedIdentityManager uses the LDAPSearchHandler underneath to retrieve the information.
http://www.skills-1st.co.uk/papers/ldap-schema-design-feb-2005/ldap-schema-design-feb-2005.html