The inSync AD mapping wizard allows you to create inSync users by importing their details from your Active Directory (AD). When you create an AD mapping, you define filter parameters to extract user details from your AD. You also define the profile, storage, and quota that inSync must assign to users who match the filter parameters.
The following table lists different methods that you can use to define AD filter parameters.
|Regular filter|| |
For most AD mappings, we recommend that you use this method.
This method allows you to select the options based on the values provided in the lists. inSync populates these lists with values after querying your AD. You must select the values in a sequential order because selecting the previous field populates the list in the next field.
|Manual filter|| |
This method allows you to enter the values for each field manually. We recommend that you use this method only if you are well-informed about your organization's AD structure.
To use this method, at the bottom of the AD Configuration page, click Switch to manual AD filters.
Note: Do not use an AD mapping that you created to import users. For integrated mass deployment (IMD), create a new AD mapping.
To create an AD mapping
- On the inSync Admin Console menu bar, click Manage > AD Mappings.
- Click Create New. The Create AD Mapping wizard appears.
- Under AD Configuration, provide the appropriate information for each field.
Field Description AD mapping name Type a name for this AD mapping. AD server Click the AD server with which that you want to associate this mapping. Base DN Click the Base DN for which you want to view the organization units and groups. Organizational unit
Click the organization unit from which you want to query for users.
Select an OU that directly contains users. Do not select an OU that contains other OUs.
Click the AD group from which you want to query for users.
Select a group that directly contains users. Do not select a group that contains other groups. IMD does not support nested groups. This means that inSync does not import users from a group that is added as a member in another group.
Type the department from which you want to query for users.
Select a department only if it has been defined in your AD. Otherwise, leave this field blank. If you select a department that does not exist in the AD, inSync does not import any user.
Click the country from which you want to query for users.
Select a country only if it has been defined in the AD. Otherwise, leave this field empty. If you select a country that does not exist in the AD, inSync does not import any user.
Name to be used for creation
If you want to create inSync user names in the first name and last name format, click Common Name(cn).
If you want to use the AD user name as the inSync user name, click Logon Name.
Note: If you choose to manually provide the AD Configuration details, ensure that you type the LDAP distinguished name of the Base DN, Organizational unit, and AD group. For example, OU=Marketing,DC=AD-cloud,DC=druva,DC=com. To find the distinguished name, open the AD object property window on your AD server, and under the Attribute Editor tab, find the distinguishedName field.
- Under inSync Configuration, provide the appropriate information for each field.
Field Name Profile Click the profile to which you want to assign the users that you import from your AD. Storage Click the storage where inSync must store the backup data from user devices. Quota per user Type the quota for the users. Auto import new users Do not select this check box. Send activation email to newly added users If you want inSync to send activation emails to new users, select this check box. Auto update existing users If you want inSync to query your AD at regular intervals and deactivate users who were removed from the AD, select this check box.
- Click Finish.