How do I enable Active Directory integration with UIM?
Article ID: 34343
Updated On:
Products
Issue/Introduction
Environment
UIM 9.x or later
Resolution
Configuring LDAP authentication in UIM is comprised of three basic steps:
- Define LDAP resources.
- Configuring the hub to communicate with an LDAP resource.
- Linking an ACL with an Active Directory group.
Define LDAP resources
This section requires a bit of planning and you may need to involve your Windows admin for this step as this is an area of configuration that is very specific to your Active Directory environment and policies. Some customers might define a container to store all UIM objects in. Many customers set up groups that will correspond with the permissions that will be associated with a UIM user.
For example a customer might create a container called UIM with Groups and Users container beneath that. Then within the groups container, a customer might create multiple groups that define the roles of the members; administrative groups, customer groups, etc.
Once your groups and users are created, add your users to the appropriate groups.
Configuring the hub
You will first need to enable LDAP integration in the Hub Configuration, by editing the General -> Settings configuration. The changes needed here are:
- Check LDAP Authentication to enable the section
- Enter a Server Name
- Select the Server Type. In this case, ensure that Active Directory is selected.
- Authentication Sequence controls the order of where the hub looks up a user account. Nimsoft > LDAP means the hub looks in its local database before going to LDAP. LDAP > Nimsoft means the hub references the Active Directory server first.
- Click the "Lookup" button to ensure you are able to contact the LDAP server.
- Enter an Active Directory user account in the User field.
- Enter that user's password in the Password field.
- Click the "Test" button to ensure that you can authenticate to the LDAP server using the entered credentials.
- The Group Container field is a reference to where the hub needs to find the LDAP groups that UIM ACLs are linked to. You'll need to fill this in using standard LDAP object naming conventions. For example, if your domain is example.com and you store your UIM groups in a container called UIM\Groups you might enter CN=Groups,CN=UIM,DC=example,DC=com
- The User Container field is a reference to where the hub needs to find the LDAP users that that UIM is authenticating to the system. You'll need to fill this in using standard LDAP object naming conventions. For example, if your domain is example.com and you store your UIM users in a container called UIM\Users you might enter CN=Users,CN=UIM,DC=example,DC=com
- Click OK to exit the LDAP settings.
- Click OK to save the settings in the hub and restart.
Link ACLto Active Directory Group
Your next step is to create UIM ACLs that will correspond to the groups you defined in Active Directory.
- Open Infrastructure Manager
- Click Security
- Choose Manage Access Control List
- Click the New button to create a new ACL. You may choose another ACL to pattern the new ACL from.
- Enter a name for the ACL
- Click OK
- Click Set LDAP Group
- A list of LDAP groups from your Group Container is presented. Choose the appropriate group to link this ACL to.
Additional Information
If you would like more information on LDAP integration with the UIM environment, please see the product documentation at
Feedback
