HTCondorWiki: How To Use Proxies With Ssl

 6. Once all of the peers of a given client or CE are authenticating
 successfully via SSL, you can upgrade to HTCondor-CE 6 and HTCondor 10.X.
 In order to use EGI Check-In tokens, the CE needs to be running HTCondor 10.4.0 or later.
+
+{subsection: VOMS Attributes}
+
+In HTCondor 23.5.2 and later, the CE can use VOMS attributes from the client's X.509
+proxy in the mapfiles. The attributes will be appended to the end of the certificate subject,
+separated with commas, when looking for matches in the mapfiles.
+To enable this optional behavior, set the following configuration parameter:
+
+  USE_VOMS_ATTRIBUTES = True
+
+This will also cause some job attributes to be set containing the VOMS attributes.
+If you want the VOMS attributes to be added to the job ad but not be used in the
+mapfiles, then set the following configuration parameter as well:
+
+  AUTH_SSL_USE_VOMS_IDENTITY = False