You can transfer user or group information from the LDAP database if there any integration is configured. These import sources match fields in your LDAP database to fields in your instance.
To import data using LDAP, you need to configure an import source first. To perform this, please complete the steps below:
- Navigate to Import → Import Sources;
- Click New, fill in the fields and click Save.
Import sources form fields
| Field | Description |
|---|
| Name | Displayed import source name. |
| Import set table name | Displayed import set table name. |
| Type | Type of external data source. To import data from your LDAP source, select LDAP. |
| LDAP Definition | Specify the definition containing locations, people and user groups. You can configure this definition at the System LDAP → LDAP Definition menu item. |
LDAP definition form fields | Field | Description |
|---|
| Name | Specify the definition name. The name you enter here becomes a target in the Import Sources record. | | Active | Select this checkbox to activate the LDAP definition and to allow importing data. | | RDN | Enter the relative distinguished name (RDN) of the subdirectory to search through. | | Server | Specify the LDAP server containing the users and groups directory and other information related to LDAP. To configure the server, perform the needed actions at the System LDAP → LDAP Servers menu item. | | Table | Select the target table that perceives the data from your LDAP server. For users, select the Users (sys_user) table. The target table specifying is used for LDAP auto-provisioning (automatic creation of users in the Users (sys_user) table). This feature can be enabled or disabled by setting the proper value for the user.ldap_autoprovision property (for more information about this property, please refer to the Available System Properties article). | | Filter | Enter a filter string to select specific records to import from the OU (organizational unit). For example, this filter specifies the excerpt, as shown below: - Classified as a person,
- Have an sn attribute value,
- Are not computers,
- Are not flagged as inactive,
- And login prerequisites are not equal to 'admin@simpleone.ru'.
(&(objectClass=person)(sn=*)(!(objectClass=computer))(!(userAccountControl:1.2.840.113556.1.4.803:=2))(!(userPrincipalName=*.admin@simpleone.ru)))
For more information about LDAP filter syntax, please refer to appropriate RFC. | | Query field | Specify the attribute name within the LDAP server for querying the records. ActiveDirectory, mostly, uses the sAMAccountName attribute. Other LDAP servers tend to use the cn attribute. |
|