Version Warning

The content below is for Apache Syncope <= 1.2 - for later versions the Reference Guide is available.

Introduction

This wiki page shows all the steps needed to configure an external Active Directory resource identified by the following connection parameters:

Server hostname: 192.168.0.129
Server port: 636
Principal: cn=Administrator,cn=Users,dc=pluto,dc=org
Principal password: password
Root suffixes: dc=pluto,dc=org
Entry base context: cn=Users,dc=pluto,dc=org

In order to link an external Active Directory resource there are pre-requisites and configuration steps to be satisfied.

Pre-Requisites

  1. Install ConnId Active Directory JNDI connector bundle

Configuration steps

  1. Configure Active Directory JNDI connector instance
  2. Configure Active Directory resource

Configure Active Directory JNDI connector instance

Please, take a look at all configurable parameters at Active Directory Connector Configuration and use this page as reference to provide your configuration.

  1. Open your browser and access to the Syncope administration console (http://host:port/syncope-console).
  2. Log into the interface by providing the following credentials:
    1. Login: admin
    2. Password: password.
  3. Click on the Resources tab.
  4. Click on the Connectors sub-tab.
  5. Click on Create new Connector button (configuration modal page appears).
  6. Click on tab General.
    1. Provide Display name (e.g. 'Active Directory demo connector') and the correct Bundle name (org.connid.bundles.ad.${version}).
  7. Click on tab Configurations and provide connector instance configuration.
    Server hostname: 192.168.0.129
    Server port: 636
    Principal: cn=Administrator,cn=Users,dc=pluto,dc=org
    Principal password: password
    Root suffixes: dc=pluto,dc=org
    Entry base context: cn=Users,dc=pluto,dc=org
    Object classes to synchronize: User
    Entry object classes: Top Person OrganizationalPerson User
    Retrieve deleted users: TRUE
    Trust all certs: TRUE
    Memberships: cn=Domain Guests,cn=Users,dc=pluto,dc=org
  8. Click on tab Capabilities.
  9. Check needed capabilities as shown at Connector instance configuration.
  10. Click on Save button.

Configure Active Directory resource

  1. Click on the Resources tab.
  2. Click on the Resources sub-tab.
  3. Click on Create new Resource button (configuration modal page appears).
  4. Click on Resource Details tab.
  5. Choose from the list the correct Connector instance name.
  6. Provide the following information
    1. Name: Active Directory demo
    2. Connector: Active Directory demo connector
  7. Click on Schema Mappings tab.
  8. Click on Add button to insert attributes mapping.
  9. Provide Account Link: 'cn=' + username + ',cn=Users,dc=pluto,dc=org'
  10. Click on Save button.
Schema mapping

Internal mapping types

Internal mapping

External Attributes

Mandatory condition

Account Id

Password

Username

 

 

true

X

 

Password

 

 

true

 

X

UserSchema

surname

sn

true

 

 

UserSchema

firstname

givenName

false

 

 

UserSchema

fullname

displayName

false

 

 

UserSchema

email

mail

true