Configuration Guide › SiteMinder Integration › How to Protect CA Identity Manager with SiteMinder › Configure the Policy Store for CA Identity Manager › Configure Microsoft Active Directory

Configure Microsoft Active Directory

To configure a Microsoft Active Directory policy store, you apply the activedirectory_ims8.ldif script.

To configure an Active Directory policy store

1. Configure the directory as a supported SiteMinder Policy Store.

   Note: Be sure that SiteMinder is pointing to this policy store. For configuration instructions, see the CA SiteMinder Policy Server Installation Guide.

2. Modify the activedirectory_ims8.ldif schema file as follows:
   1. In a text editor, open the activedirectory_ims8.ldif file. The default Windows location is:

      C:\Program Files\CA\Identity Manager\IAM Suite\Identity Manager\tools\policystore-schemas\MicrosoftActiveDirectory

   2. Replace all instances of {root} with the root organization for the directory.

      The root organization must match the root organization that you specified when you configured the policy store in the Policy Server Management Console.

      For example, if the root is dc=myorg,dc=com, replace
      dn: CN=imdomainid6,CN=Schema,CN=Configuration,{root} with dn: CN=imdomainid6,CN=Schema,CN=Configuration,dc=myorg,dc=com

   3. Save the file.
3. Add the schema file as described in the documentation for your directory.