CA Adapter UNIX Installation Guide › Additional Configurations to Support LDAP Repository in AuthMinder › Creating Organization in LDAP Repository

Creating Organization in LDAP Repository

You must use Administration Console to support LDAP user directories. You must do this after you have successfully configured AuthMinder Server and Administration Console for AuthMinder.

1. Log in to Administration Console as Master Administrator by using the following URL:

   http[s]://host_name:port_number/arcotadmin/masteradminlogin.htm

   In the preceding URL, host_name indicates the host name or the IP address of the application server where you configured the Administration Console and port_number indicates the port at which the server listens to incoming requests.

2. Create a Global Administrator account and assign only the DEFAULTORG to this administrator.
3. Log out of Administration Console.
4. Access AuthMinder Administration Console for the Global Administrator by using the following URL:

   http[s]://host_name:port_number/arcotadmin/adminlogin.htm

5. Provide the organization name as DEFAULTORG and the username and password assigned to the global user account that you created in Step 2.

   You will be prompted to reset your password and login again to the Administration Console.

6. Click the Organizations tab.
7. Under the Manage Organizations section, click the Create Organization link to display the Create Organization page.
8. Enter the details of the organization, as described in the following table:

1. Click Next.

   The Create Organization page to collect the LDAP repository details opens.

2. Enter the details, listed in the following table, to connect to the LDAP repository.

1. Click Next to proceed.

   The page to map the repository attributes opens.

2. On this page:
   1. Select an attribute from the Arcot Database Attributes list, then select the appropriate attribute from the Enterprise LDAP Attributes list that needs to be mapped with the Arcot attribute, and click Map.

      Important! Mapping of the USERNAME, EMAILADDR, and TELEPHONENUMBER attributes is compulsory. If you are using SunOne Directory, then map USERNAME to uid, EMAILADDR to mail, and TELEPHONENUMBER to telephoneNumber.

   2. Repeat the process to map multiple attributes, until you finish mapping all the required attributes.

      Note: You do not need to map all the attributes in the Arcot Database Attributes list. You only need to map the attributes that you will use.

      The attributes that you have mapped will be moved to the Mapped Attributes list.

      If required, you can unmap the attributes. If you want to unmap a single attribute at a time, then select the attribute and click Unmap. However, if you want to clear the Mapped Attribute list, then click Reset to unmap all the mapped attributes.

3. Click Next to proceed.

   The Select Attribute(s) for Encryption screen opens.

4. Select the attributes that you want to encrypt, and click Next.

   The Add Administrators screen opens.

   Note: This page is not displayed, if all the administrators currently present in the system have scope to manage all organizations.

5. From the Available Administrators list, select the administrators who will manage the organization and click the > button to add the administrator to the Managing Administrators list.

   Note: Assigning organization to administrators can be done at any time by updating the scope of existing administrators or by creating new administrators to manage the organization.

   The Available Administrators list displays all the administrators who can manage the new organization.

   Note: If some administrators have scope to manage all organizations in the system, then you will not see the corresponding entries for those administrators in this list.

   The Managing Administrators list displays the administrators that you have selected to manage this organization.

6. Click Next to proceed.

   The Activate Organization screen opens.

   Note: The username attribute cannot be changed or updated after the organization is activated.

7. Click Enable to activate the new organization.

   The message box opens.

8. Click OK to complete the process.
9. Refresh the AuthMinder cache for changes to take effect.

   Now if you perform a search for organizations, in the search result, you will see the LDAP-based organization you created.

10. Create a user in this organization.
11. Search for the user created in the preceding step and promote that user to Global Administrator (GA).

    Note: Refer to the Promoting Users to Administrators section in the CA AuthMinder Administration Guide for more information.

    You will need the details of this GA to resolve the credential types for the LDAP-based organization. See Resolving Credential Types for LDAP Organization for more information.

12. Log out of the Administration Console.