Back to User Management Main Page

What does this section cover?

Navigating to LDAP Integration

What is LDAP Integration

?

Lightweight Directory Access Protocol (LDAP) is an application protocol for communicating with, and querying and modifying items in, a Directory Service provider such as Active Directory (a Directory Services Database).

CRM.COM integration with LDAP/Active Directory makes it possible to import and manage Active Directory users via Users in CRM.COM. In more detail, the The following actions are available using through LDAP integrationIntegration:

• Import Users from Active Directory and map to existing or new CRM.COM usersImport Users.
• Un-map CRM.COM Users from Active Directory and create them as new users in CRM.COM (Option to map them to Active Directory users or not) 
• Un-map CRM.COM users from Active Directory users
• Warn users via CRM.COM for password expiration in Active Directory
• Change Active Directory password via CRM.COM

Validations & Restrictions

LDAP Integration

1. Navigate to PATH
2. Search for the 
3. Click on the number/name of the record you would like to access, to go to the Data Entry page
4. From the Action Menu click on Actions > "Suspend Account"

• Users.
• Warn Users through CRM.COM regarding password expiration in Active Directory and inform of possibility to Change Active Directory password via CRM.COM.

• Navigate to LDAP Integration and explore existing LDAP Users via the respective tab.
• Use the Search Criteria to search for the User to update.
• Select the Users to Update by checking the checkbox on the left of the Username and apply one of the following Actions:
  • Un-map
  • Map
  • Create User
• Click on Actions > Import to import new Users through the Active Directory.

Check the Validations & Restrictions Table for a list of available Actions when working with LDAP Integration, including each Action's related restrictions and validations.  View the Attributes Table below for a comprehensive description of the LDAP Integration fields.  

Image Added

Anchor
validations validations

Validations & Restrictions

Anchor
attributes attributes

LDAP Attributes

Available Actions for LDAP Integration

Import Users

1. Navigate to LDAP INTEGRATION.
2. From the Actions Menu click on ACTIONS > IMPORT USERS.
3. From the Import LDAP Users modal select the Security Group by clicking on the drop down list.
4. Click on SUBMIT.
   
5. Once the Users are imported in CRM.COM they can be viewed in the LDAP-USERS Tab.

Mapping Imported Users to CRM.COM Users

Once the LDAP Users are imported and become available in CRM.COM they can be mapped to CRM.COM Users with the following procedure:

1. Go to the LDAP-USERS Tab.

2. Select the User you want to map.

   Note
   • Use the criteria to search for the Users to be un-mapped. • Only one User can be mapped at a time.

3. From the Menu click on ACTIONS > MAP.
   
4. Using the modal window, search for the CRM.COM User to be mapped to the LDAP User.
5. Click on SUBMIT.
   

Creating new CRM.COM Users from Imported Users

Once Users are imported and available in CRM.COM, they can be used to create CRM.COM Users. The process enables the creation of multiple Users at a time.

1. Go to the LDAP-USERS Tab.

2. Select the Users you want to create in CRM.COM.

   Note
   • Use the criteria to search for the Users to be un-mapped. • Multiple Users ca be created at a time.

3. Click on ACTIONS >CREATE USERS.
   
4. Follow the process as described in Bulk Users Creation.

Un-map Users

There is the option to remove the mapping between LDAP Users and their CRM.COM User account. This results in LDAP Users being no longer able to login to CRM.COM using Active Directory credentials and having to use their CRM.COM User accounts credentials.

1. Navigate to LDAP INTEGRATION.
   
2. Go to the LDAP-USERS Tab.

3. Select the User to un-map by checking the checkbox on the left of the Username.

   Note
   Use the criteria to search for the Users to be un-mapped.

4. Click on ACTIONS >UNMAP.

Password Ageing Warning

User Accounts imported from Active Directory can be handled through CRM.COM.  The System is responsible for informing Users about their Active Directory Password Expiration. The Expiration Date is retrieved through Active Directory.
Upon logging in, CRM.COM displays a warning message informing the User of the number of days left until their password expires. The Users can then follow one of the processes described in Managing Users for updating their Passwords.