CoreOne Active Directory Connector

Introduction

This article describes the CoreOne Active Directory Connector.

Configurationsparameter

The following configuration parameters are available for the Microsoft Active Directory system connector:

Parameter

Mandatory field

Datatype

Description

Parameter

Mandatory field

Datatype

Description

Server

-

Text

Name of the Servers

Domain name

Text

IP address from the server or the FQDN e.g.

Username

-

Text

User credentials on the server

Password

-

Password

User credentials on the server

Exchange Server

-

Text

IP address from the server or the FQDN e.g. 10.20.0.5 /  test.verwaltung.example.ch

Exchange SSL

-

Checkbox

Exchange SSL

Exchange ShellUri

-

Text

Exchange ShellUri

Exchange AppName

-

Text

Exchange AppName

Exchange Authentication method

-

Drop Down:

Default
Basic
Negotiate
NegotiateWithImplicitCredential
Credssp
Digest
Kerberos

The authentication method

User must change password at next login

-

Checkbox

The user is prompted to change the password at the next login

→ This setting can be overwritten either by a password policy that is set on the target system or with the corresponding attribute on the identity provisioning configuration

Ignore user deletion protection

-

Checkbox

Cancels the deletion protection from the user

Ignore resources deletion protection

-

Checkbox

Unprotects the resources from deletion

Create home directory

-

Checkbox

Creates a home directory

Create profile directory

-

Checkbox

Creates a profile directory

Delete home directory

-

Checkbox

 Deletes the home directory

Delete profile directory

-

Checkbox

Deletes the profile directory

Update home directory

-

Checkbox

Updates the home directory

Update profile directory

-

Checkbox

Updates the profile directory

Display attributes for unmanaged identities

-

Text

Display attributes for unmanaged identities. This is the property that will be used to display an unmanaged identity within the CoreOne Suite. Use either SamAccountName, DisplayName or any other meaningful Active Directory attribute.

Compatibility

The following target systems are supported:

Microsoft Active Directory 2008

Microsoft Active Directory 2008 R2

Microsoft Active Directory 2012

Microsoft Active Directory 2012 R2

Microsoft Active Directory 2016

Microsoft Active Directory 2019

Resources type

The following resource types are supported:

Groups

AD object

Description

AD object

Description

Security Group

An Active Directory security group.

Distribution Group

An Active Directory distribution group.

AGDLP-Group

Creates and maintains various group objects in accordance with the AGDLP group concept (AGDLP )

Computer

Deprecated

AD Object

Description

AD Object

Description

Computer

Computer object

Identity types

The following identity types are supported:

AD Object

Description

AD Object

Description

User

User object

Contact

Contact object

 

Identity features

The following identity functions are supported:

Resources features

The following resource functions are supported:

System Connector task features

Supported

Create/delete resources

Provision resources     

Update resources         

Provisioning resource changes 

Deprovisioning resources         

Provisioning resource allocations         

Deprovisioning resource allocations     

Provisioning resources-resource allocations     

Deprovisioning resource resource allocations   

 

Cleanup features

The following cleanup functions are supported:

System Connector task features

Supported

In the should-actual Log available    

Should be - Actually is - cleanup

Read back account properties

Resource identity member target system clean up

Resource resource member target system clean up

© ITSENSE AG. Alle Rechte vorbehalten. ITSENSE und CoreOne sind eingetragene Marken der ITSENSE AG.