You can transfer user or group information from the LDAP database if there any integration is configured. These import sources match fields in your LDAP database to fields in your instance.
Creating an import source
To import data using LDAP, you need to configure an import source first. To perform this, please complete the steps below:
- Navigate to Import → Import Sources.
- Click New and fill in the fields.
- Click Save or Save and Exit to apply changes.
Import sources form fields
| Field | Mandatory | Description |
|---|---|---|
| Name | Y | Displayed import source name. |
| Import Set Table Name | Y | Displayed import set table name. |
| Type | Y | Type of external data source. To import data from your LDAP source, select LDAP. |
| LDAP Definition | N | Specify the definition containing locations, people, and user groups. You can configure this definition at the System LDAP → LDAP Definition menu item. See the LDAP Integration article to learn more. |
LDAP definition form fields Specify the LDAP server containing the users and groups directory and other information related to LDAP. To configure the server, perform the needed actions at the System LDAP → LDAP Servers menu item. Select the target table that receives the data from your LDAP server. For users, select the Users (sys_user) table. The target table specifying is used for LDAP auto-provisioning (automatic creation of users in the Users (sys_user) table). This feature can be enabled or disabled by setting the proper value for the user.ldap_autoprovision property. Enter a filter string to select specific records to import from the OU (organizational unit). For example, this filter specifies the excerpt, as shown below: (&(objectClass=person)(sn=*)(!(objectClass=computer))(!(userAccountControl:1.2.840.113556.1.4.803:=2))(!(userPrincipalName=*.admin@simpleone.ru))) For more information about LDAP filter syntax, please refer to the appropriate RFC. Specify the attribute name within the LDAP server for querying the records. ActiveDirectory, mostly, uses the sAMAccountName attribute. Other LDAP servers tend to use the cn attribute.Field Mandatory Description Name Y Specify the definition name. The name you enter here becomes a target in the Import Sources record. Active N Select this checkbox to activate the LDAP definition and to allow importing data. Relative Distinguished Name (RDN) N Enter the relative distinguished name (RDN) of the subdirectory to search through. Server Y Table Y Filter N Query Field N
