Using LDAP Integration for User Management

Back to User Management Main Page

Table of Contents

Navigating to LDAP Integration

FOUNDATION > USER MANAGEMENT > LDAP INTEGRATION

What is LDAP Integration?

Lightweight Directory Access Protocol (LDAP) is an application protocol for communicating with, and querying and modifying items in, a Directory Service provider such as Active Directory (a Directory Services Database).

CRM.COM integration with LDAP/Active Directory makes it possible to import and manage Active Directory Users in CRM.COM. The following actions are available through LDAP Integration:

  • Import Users from Active Directory and map to existing or new CRM.COM Users.
  • Un-map CRM.COM Users from Active Directory Users.
  • Warn Users through CRM.COM regarding password expiration in Active Directory and inform of possibility to Change Active Directory password via CRM.COM.
  • Navigate to LDAP Integration and explore existing LDAP Users via the respective tab.
  • Use the Search Criteria to search for the User to update.
  • Select the Users to Update by checking the checkbox on the left of the Username and apply one of the following Actions:
    • Un-map
    • Map
    • Create User
  • Click on Actions > Import to import new Users through the Active Directory.

Check the Validations & Restrictions Table for a list of available Actions when working with LDAP Integration, including each Action's related restrictions and validations.  View the Attributes Table below for a comprehensive description of the LDAP Integration fields.  

LDAP Integration

Validations & Restrictions

ActionRestrictions
Any LDAP related action To use an action related to LDAP Users the User Authentication Settings - Authentication Policy must be configured to Authenticate using LDAP.
Import Users
Map
  • User Authentication Settings - Authentication Policy must be configured to Authenticate using LDAP.
  • Users are imported from Active Directory.
  • There are un-mapped Users present in the System.
Un-map
  • User Authentication Settings - Authentication Policy must be configured to Authenticate using LDAP.
  • Users are imported from Active Directory.
  • LDAP Users are mapped to CRM.COM User accounts.
Create Users
  • User Authentication Settings - Authentication Policy must be configured to Authenticate using LDAP.
  • Users are imported from Active Directory.
  • There are un-mapped Users present in the System.

 

LDAP Attributes

NameDescription
Main Information
Users Imported

Totalnumberofimported Users.

Users MappedTotalnumberofmapped Users.
Users ActivateTotalnumberofactivated Users.
Security Groups ImportedTotalnumberofimported Security Groups.
Domains UsedTotalnumberofused Domains.
Domains ImportedTotal number of imported Domains.
Latest Import DateThe latest date on which Users were imported.

Person Name

The person name of the LDAP User in Active Directory/LDAP.

LDAP Users

Username

The username of the LDAP User in Active Directory/LDAP.

Person NameThe Name of the User.

Security Group Name

The LDAP User's Security Group (available through Active Directory).

CRM.COM Username

The LDAP User's Username in CRM.COM.

Is Mapped

Indicates whether the LDAP User is mapped to a User account in CRM.COM.

Is Active

Indicates whether the LDAP User is 'Active' or not.

 

Available Actions for LDAP Integration

The Action to Import Users is available from the Top Menu.
TOP MENU ACTIONS 

The Actions to Map, Un-Map and Create new Users are available from the LDAP-USERS Section.

LDAP USERS ACTIONS

 

Import Users

  1. Navigate to LDAP INTEGRATION.
  2. From the Actions Menu click on ACTIONS > IMPORT USERS.
  3. From the Import LDAP Users modal select the Security Group by clicking on the drop down list.
  4. Click on SUBMIT.
  5. Once the Users are imported in CRM.COM they can be viewed in the LDAP-USERS Tab.

Mapping Imported Users to CRM.COM Users

Once the LDAP Users are imported and become available in CRM.COM they can be mapped to CRM.COM Users with the following procedure:

  1. Go to the LDAP-USERS Tab.
  2. Select the User you want to map.

    • Use the criteria to search for the Users to be un-mapped.
    • Only one User can be mapped at a time.

  3. From the Menu click on ACTIONS > MAP.
  4. Using the modal window, search for the CRM.COM User to be mapped to the LDAP User.
  5. Click on SUBMIT.

Creating new CRM.COM Users from Imported Users

Once Users are imported and available in CRM.COM, they can be used to create CRM.COM Users. The process enables the creation of multiple Users at a time.

  1. Go to the LDAP-USERS Tab.
  2. Select the Users you want to create in CRM.COM.

    • Use the criteria to search for the Users to be un-mapped.
    • Multiple Users ca be created at a time.

  3. Click on ACTIONS >CREATE USERS.
  4. Follow the process as described in Bulk Users Creation.

Un-map Users

There is the option to remove the mapping between LDAP Users and their CRM.COM User account. This results in LDAP Users being no longer able to login to CRM.COM using Active Directory credentials and having to use their CRM.COM User accounts credentials.

The un-mapped LDAP Users can be consequently mapped to another CRM.COM User account, as the LDAP User information is kept in CRM.COM even if it is not mapped to an Account.

  1. Navigate to LDAP INTEGRATION.
  2. Go to the LDAP-USERS Tab.
  3. Select the User to un-map by checking the checkbox on the left of the Username.

    Use the criteria to search for the Users to be un-mapped.

  4. Click on ACTIONS >UNMAP.

Password Ageing Warning

User Accounts imported from Active Directory can be handled through CRM.COM.  The System is responsible for informing Users about their Active Directory Password Expiration. The Expiration Date is retrieved through Active Directory.
Upon logging in, CRM.COM displays a warning message informing the User of the number of days left until their password expires. The Users can then follow one of the processes described in Managing Users for updating their Passwords.