3 Replies Latest reply on Oct 24, 2017 8:24 AM by Jonathan.Schmidt

    AD Integration

    bernd.kallweit@maxxys.de Rookie

      Hi,

       

      I want to exploit the memberOf attribute of AD user accounts and already import that information through LDAP Import.

      I also created another LDAP mapping to import AD group information into a new BO (called ADGroups).

       

      The memberOf attribute contains the list of group-DNs for a particular user. What I want to do now is to link the employee with the groups she's member of, based on that group list.

      Unfortunately I cannot come up with an idea how to achieve this.

       

      Somehow I would need to traverse the text field, which contains the memberOf information, extract each DN, and link the corresponding ADGroup; but how?

       

      Ay ideas?

       

       

      Thanks!

      Bernd

        • 1. Re: AD Integration
          Jonathan.Schmidt SupportEmployee

          I don't think you could do this in the integration itself, but you could potentially set up a workflow for each team using a "Run for Search" block that finds the link from your Employee to the ADGroups item and links it to the correct team.  This is one way to get the "Contains" operator in play for such logic.  You'd need one per team that you want to do this with.

           

          There may be better ways to do this, for instance, if you could separate out the list into one item at a time, you could just place them into a single field on the employee and set up triggered rules to do the linking.

          • 2. Re: AD Integration
            bernd.kallweit@maxxys.de Rookie

            Hi Jonathan,

             

            I found a solution using a triggered web service script, which works through the memberOf list and, to make things a little trickier, needed to use the integration web service to build the relationship between an Employee and an ADGroup.

            • 3. Re: AD Integration
              Jonathan.Schmidt SupportEmployee

              That's a method I had not thought of.  Would you mind sharing your web service script and setup for others that need to go about similar tasks in the future?