User directory

Become a portal pro Self Service Tools Knowledge Base My Account Notifications & Alerts Product Support Software Downloads Technical Documentation User Forums Video Tutorials RSS Feed My Account My Groups My License Assets My Products My Profile My Cases My Warranty Assets Contact Us Licensing Assistance Technical Support View All Search All Guides Support Technical Documentation Directory Sync Pro for Active Directory Directory Sync Pro for Active Directory - Technical Documentation Filter to locate your release notes, guides or manuals (Choose different product) Browse below by document title to locate, download or read online relevant product information Release Notes Directory Sync Pro for Active Directory 20.11.3 Release Notesview pdf Getting Started Guide Directory Sync Pro for Active Directory 20.11.3 Directory Sync Pro Intra-Forest sIDHistory Stage Migration Quick Start Guideview pdf Installation Guide Directory Sync Pro for Active Directory 20.11.3 Requirements and Installation Guideview pdf User Guide Directory Sync Pro for Active Directory 20.11.3 Password Propagation Service for Directory Sync Pro User Guideview pdfDirectory Sync Pro for Active Directory 20.11.3 User Guideview pdf -->

TOTP for admin-added applications. For instructions, see Enable time-based one-time passwords (TOTP) for two-factor authentication. Prompt for user name Use this option if you want users to supply their own user name and password. This option only applies to some application types such as user password, custom NTLM, and browser extension applications. The first time that users launch the application, they enter their login credentials for that application. The CyberArk Cloud Directory stores the user name and password so that the next time the user launches the application, the CyberArk Cloud Directory logs in the user automatically. Account Mapping Script You can customize the user account mapping here by supplying a custom JavaScript. For example, you could use the following line as a script:LoginUser.Username = LoginUser.Get('mail')+'.ad'; The script sets the login user name to the user’s mail attribute value in Active Directory and adds ‘.ad’ at the end. For example, if the user’s mail attribute value is Adele.Darwin@acme.com then the account mapping script sets LoginUser.Username to Adele.Darwin@acme.com.ad. For more information about writing a script to map user accounts, see the SAML application scripting. Also see Configure authentication security options for information on the option to use the password supplied by Active Directory users. Click Save. BambooHR inbound provisioning Inbound provisioning enables you to synchronize user data from a source directory to a supported target directory. This is different from outbound provisioning, which synchronizes user data from a source directory into a target application. The following table indicates support for data sources and targets. You can provision users from your enterprise source directories (CyberArk Cloud Directory or any source Active Directory instances connected to CyberArk Identity) to one or more target Active Directory instances and assign the right set of access based on roles. Source Target BambooHR AD SAP SuccessFactors AD UltiPro AD Workday AD CyberArk Cloud Directory CyberArk Cloud Directory AD The following users are considered for provisioning: Users created in CyberArk Cloud Directory Users created in an AD directory, which are configured to CyberArk Identity Refer to Inbound provisioning from BambooHR for more information about inbound provisioning from BambooHR.

Directory Server User Search for Cisco Mobile and Remote Access Clients and Endpoints—You can search a corporate directory server even when operating outside the enterprise firewall. When this feature is enabled, the User Data Service (UDS) acts as a proxy and sends the user search request to the corporate directory instead of sending it to the Unified Communications Manager database. LDAP Authentication for End Users LDAP synchronization allows you to configure your system to authenticate end user passwords against the LDAP directory rather than the Cisco Unified Communications Manager database. LDAP authentication provides companies with the ability to assign a single password to end users for all company applications. This functionality does not apply to PINs or application user passwords. Directory Server User Search for Cisco Mobile and Remote Access Clients and Endpoints In previous releases, when a user with a Cisco mobile and remote access client (for example, Cisco Jabber) or endpoint (for example, Cisco DX 80 phone) performed a user search while outside the enterprise firewall, results were based on those user accounts that are saved in the Cisco Unified Communications Manager database. The database contains user accounts which are either configured locally or synchronized from the corporate directory. With this release, Cisco mobile and remote access clients and endpoints can now search a corporate directory server even when operating outside the enterprise firewall. When this feature is enabled, the User Data Service (UDS) acts as a proxy and sends the user search request to the corporate directory instead of sending it to the Cisco Unified Communications Manager database. Use this feature to achieve the following results: Deliver the same user search results regardless of geographic location—Mobile and remote access clients and endpoints can perform user searches by using the corporate directory; even when they are connected outside

The enterprise firewall. Reduce the number of user accounts that are configured in the Cisco Unified Communications Manager database—Mobile clients can now search users in the corporate directory. In the previous releases, user search results were based on the users that are configured in the database. Now, administrators no longer need to configure or synchronize user accounts to the database solely for user searches. Administrators need to configure only those user accounts that are served by a cluster. Reducing the total number of user accounts in the database shortens software upgrade time frames while improving overall database performance. To configure this feature, you must enable the Enable user search to Enterprise Directory Server option in the LDAP Search Configuration window, and configure the LDAP directory server details. For details, see the Configure Enterprise Directory User Search procedure. LDAP Synchronization Configuration Task Flow Use the following tasks to pull a user list from the external LDAP directory and import it into the Unified Communications Manager database. Note If you have already synced the LDAP directory once, you can still sync new items from your external LDAP directory, but you cannot add new configurations in Unified Communications Manager to the LDAP directory sync. In this case, you can use the Bulk Administration Tool and menus such as Update Users or Insert Users. Refer to the Bulk Administration Guide for Cisco Unified Communications Manager. Procedure Command or Action Purpose Step 1 Activate the Cisco DirSync Service Log in to Cisco Unified Serviceability and activate the Cisco DirSync service. Step 2 Enable LDAP Directory Synchronization Enable LDAP directory synchronization in Unified Communications Manager. Step 3 Create an LDAP Filter Optional. Create an LDAP filter if you want Unified Communications Manager to synchronize only a subset of users from your corporate LDAP directory. Step 4

Configure LDAP Directory Sync Configure settings for the LDAP directory sync such as field settings, LDAP server locations, synchronization schedules, and assignments for access control groups, feature group templates, and primary extensions. Step 5 Configure Enterprise Directory User Search Optional. Configure the system for enterprise directory server user searches. Follow this procedure to configure phones and clients in your system to perform user searches against an enterprise directory server instead of the database. Step 6 Configure LDAP Authentication Optional. If you want to use the LDAP directory for end user password authentication, configure LDAP authentication settings. Step 7 Customize LDAP Agreement Service Parameters Optional. Configure the optional LDAP Synchronization service parameters. For most deployments, the default values are sufficient. Activate the Cisco DirSync Service Perform this procedure to activate the Cisco DirSync Service in Cisco Unified Serviceability. You must activate this service if you want to synchronize end user settings from a corporate LDAP directory. Procedure Step 1 From Cisco Unified Serviceability, choose . Step 2 From the Server drop-down list, choose the publisher node. Step 3 Under Directory Services, click the Cisco DirSync radio button. Step 4 Click Save. Enable LDAP Directory Synchronization Perform this procedure if you want to configure Unified Communications Manager to synchronize end user settings from a corporate LDAP directory. Note If you have already synced the LDAP directory once, you can still sync new users from your external LDAP directory, but you cannot add new configurations in Unified Communications Manager to the LDAP directory sync. You also cannot add edits to underlying configuration items such as the feature group template or user profile. If you have already completed one LDAP sync, and want to add users with different settings, you can use Bulk Administration menus such as Update Users or Insert Users. Procedure Step