Active Directory Connection

See the Connector Marketplace topic. Please request your administrator to start a trial or subscribe to the Premium Active Directory connector.

Active Directory is a directory service and authentication framework developed by Microsoft, primarily used in Windows environments, to manage and organize network resources, user accounts, and security settings, allowing centralized control and authentication for users and devices in a network.

This topic describes how to authenticate to Active Directory and configure any necessary connection properties in the Active Directory connection connector.

Connection Configuration #

Each connection property available in the Active Directory connector is explained below.

Connection Name #

The name of the connection to be created should be provided. This is the name that will display on the list of available connections.

Server #

The domain name or IP of the Active Directory server.

Note: This does not need to include the LDAP:\\ portion, only the server domain name or IP.

Port #

The port the Active Directory server is running on.

User #

The distinguished name of a user.

Password #

The password for the distinguished name of the specified user.

Base DN #

The base portion of the distinguished name, used for limiting results to specific subtrees.

Specifying a base DN may greatly improve performance when returning entries for large servers by limiting the number of entries that need to be examined.

Auth Mechanism #

The authentication mechanism to be used when connecting to the Active Directory server.

Possible Values:

• SIMPLE: By default, AuthMechanism is SIMPLE, and default plaintext authentication is used to log in to the server.

• DIGESTMD5: If AuthMechanism is set to DIGESTMD5, the more secure DIGEST-MD5 authentication is used.

• NEGOTIATE: If AuthMechanism is set to NEGOTIATE, NTLM/Negotiate authentication will be used.

Scope #

Whether to limit the scope of the search to the whole subtree (BaseDN and all of its descendants), a single level (BaseDN and its direct descendants), or the base object (BaseDN only).

• WHOLESUBTREE

• SINGLELEVEL

• BASEOBJECT

Limiting scope can greatly improve the search performance.

Advanced Configuration #

This section contains advanced configuration parameters.

LDAP Version #

The LDAP version used to connect to and communicate with the server.

Valid options are 2 and 3 for LDAP versions 2 and 3.

Enable SSL #

Option for creating the connection with SSL enabled.

Upload Keystore File #

Option to upload keystore file.

Add Configuration: Additional properties can be added using this option as key-value pairs.

After entering all the details, click on the TEST button.

If the connection service identification and authentication details are provided correctly, a success message stating “connection available” is generated.

Click on the CREATE button to save the changes.

If the details are incorrect or the server is down, you will get a message “Connection unavailable”.