Chat now with support

Get Live Help
Complete Registration

Sign In

Request Pricing

Contact Sales

Identity Manager 8.0 - Administration Guide for Connecting to LDAP

Table of Contents

Managing LDAP Environments

Architecture Overview One Identity Manager Users for Managing an LDAP

Setting up LDAP Directory Synchronization

Users and Permissions for Synchronizing with LDAP

Special Cases for synchronizing Active Directory Lightweight Directory Services

Setting Up the Synchronization Server Creating a Synchronization Project for initial Synchronization of an LDAP Domain Show Synchronization Results Customizing Synchronization Configuration

Configuring Synchronization in LDAP Domains Configuring Synchronization of Several LDAP Domains Updating Schemas

Speeding Up Synchronization with Revision Filtering Post-Processing Outstanding Objects Configuring Memberships Provisioning Supporting Analysis of Synchronization Issues Deactivating Synchronization

Basic Configuration Data

Setting Up Account Definitions

Creating an Account Definition

Master Data for an Account Definition

Setting Up Manage Levels

Master Data for a Manage Level

Creating a Formatting Rule for IT Operating Data Determining IT Operating Data Modifying IT Operating Data Assigning Account Definitions to Employees

Assigning Account Definitions to Departments, Cost Centers and Locations Assigning Account Definitions to Business Roles Assigning Account Definitions to all Employees Assigning Account Definitions Directly to Employees Assigning Account Definitions to System Roles Adding Account Definitions in the IT Shop

Assigning Account Definitions to a Target System Deleting an Account Definition

Password Policies

Predefined Password Policies Editing Password Policies

General Master Data for a Password Policy Policy Settings Character Sets for Passwords

Custom Scripts for Password Requirements

Script for Checking a Password Script for Generating a Password

Restricted Passwords Testing a Password Testing Generating a Password Assigning a Password Policy

Initial Password for New LDAP User Accounts Email Notifications about Login Data Target system managers

General Master Data for an LDAP Domain LDAP Specific Master Data for a LDAP Domain Specifying Categories for Inheriting LDAP Groups How to Edit a Synchronization Project

LDAP User Accounts

Linking User Accounts to Employees Supported User Account Types Entering Master Data for LDAP User Accounts

General Master Data for a LDAP User Account Contact Data for an LDAP User Account Address Information for an LDAP User Account Organizational Data for an LDAP User Account Miscellaneous Data for an LDAP User Account

Additional Tasks for Managing LDAP User Accounts

Overview of LDAP User Accounts Changing the Manage Level of an LDAP User Account Assigning LDAP Groups Directly to LDAP User Accounts Assigning Extended Properties to an LDAP User Account

Automatic Assignment of Employees to LDAP User Accounts

Editing Search Criteria for Automatic Employee Assignment

Disabling LDAP User Accounts Deleting and Restoring LDAP User Accounts

LDAP Group Master Data Assigning LDAP Groups to LDAP User Accounts and LDAP Computers

Assigning LDAP Groups to Departments, Cost Centers and Locations Assigning LDAP Groups to Business Roles Assigning LDAP User Accounts directly to an LDAP Group Assigning LDAP Computers Directly to an LDAP Group Adding LDAP Groups to System Roles Adding LDAP Groups to the IT Shop

Additional Tasks for Managing LDAP Groups

Overview of LDAP Groups Effectiveness of Group Memberships LDAP Group Inheritance Based on Categories Assigning Extended Properties to an LDAP Group

Deleting LDAP Groups

LDAP Container Structures

General Master Data for LDAP Containers Contact Data for LDAP Containers Address Information for LDAP Containers

Master Data for an LDAP Computer Assigning LDAP Computers directly to LDAP Groups

Reports about LDAP Objects

Overview of all Assignments

Appendix: Configuration Parameters for Managing LDAP Appendix: Default Project Template for LDAP

OpenDJ Basic Template Default Project Template for Active Directory Lightweight Directory Services

Appendix: Authentication Modules for Logging into the One Identity Manager

Organizational Data for an LDAP User Account

LDAP User Accounts > Entering Master Data for LDAP User Accounts > Organizational Data for an LDAP User Account

Organizational Data for an LDAP User Account

Enter the following organizational master data on the Organizational tab.

Table 35: Organizational Master Data
Property	Description
Business unit	Business unit to which the employee is assigned.
Department	Employee's department If you have assigned an account definition, the input field is automatically filled out with respect to the manage level.
Location	Employee's location. If you have assigned an account definition, the input field is automatically filled out with respect to the manage level.
Location ID	Location identifier (country and city) for telegram services.
Employment	Job details.
Employee number	Number for identifying the employee in addition to their ID.
Title	The user’s academic title. If you have assigned an account definition, the input field is automatically filled out with respect to the manage level.
Organizational position	Details of position in the company, for example, directory or department manager.
Office	Office. If you have assigned an account definition, the input field is automatically filled out with respect to the manage level.
Preferred language	Preferred language. If you have assigned an account definition, the input field is automatically filled out with respect to the manage level.
Account manager	Manager responsible for the user account.
Secretary	Secretary’s user account.
Country ID	The country ID.
Company	Employee's company. If you have assigned an account definition, the input field is automatically filled out with respect to the manage level.
Car license plate	Vehicle's license plate.

Miscellaneous Data for an LDAP User Account

LDAP User Accounts > Entering Master Data for LDAP User Accounts > Miscellaneous Data for an LDAP User Account

Miscellaneous Data for an LDAP User Account

Enter the following master data on the Miscellaneous tab.

Table 36: Miscellaneous Master Data
Property	Description
See Also	Link to another LDAP object.
Default PC	User's workstation.
User ID	User's Identification number.

Additional Tasks for Managing LDAP User Accounts

LDAP User Accounts > Additional Tasks for Managing LDAP User Accounts

Additional Tasks for Managing LDAP User Accounts

After you have entered the master data, you can apply different tasks to it. The task view contains different forms with which you can run the following tasks.

Overview of LDAP User Accounts

Changing the Manage Level of an LDAP User Account

Assigning LDAP Groups Directly to LDAP User Accounts

Assigning Extended Properties to an LDAP User Account

Overview of LDAP User Accounts

LDAP User Accounts > Additional Tasks for Managing LDAP User Accounts > Overview of LDAP User Accounts

Overview of LDAP User Accounts

Use this task to obtain an overview of the most important information about a user account.

To obtain an overview of a user account

Select the category LDAP | User accounts.
Select the user account in the result list.
Select LDAP user account overview in the task view.

Related Documents

© 2020 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy