Implementation Guide › Configuring Basic Users and Access › Configuring the User Store › Reference an LDAP Directory

Reference an LDAP Directory

Configure the user store as a reference to an LDAP directory when global user details are stored in Microsoft Active Directory, Sun One, or Novell Directory.

Note: Application details are stored in the default repository. Referencing an external user store does not update that user store.

To reference an LDAP directory as the user store

1. Log into a CA User Activity Reporting Module server as a user with administrator privileges or as the EiamAdmin user.
2. Click the Administration tab.

   If you log in as the EiamAdmin user, this tab displays automatically.

3. Select the User and Access Management subtab, and then click User Store on the left pane.

   The CA EEM Server configuration for User Store appears.

4. Select Reference from an external directory.

   Fields for the LDAP configuration appear.

5. Complete these fields as planned on the external directory worksheet.

   Consider the following example for binding to Active Directory objects, with the following binding string:

   Set objUser = Get Object ("LDAP://cn=Bob, cn=Users, ou=Sales, dc=MyDomain, dc=com"), where cn is the Common Name, ou is the Organizational Unit, and dc is composed of two Domain Components that make up the full DNS name. For User DN, you would enter:

   cn=Bob,cn=Users,ou=Sales,dc=MyDomain,dc=com
   

6. Click Save.

   Saving this reference loads user account information into CA EEM. This makes it possible for you to access these user records as global users and then add application-level details such as application user group, the name for user role.

7. Review the displayed status to verify that the external directory bind is successful and that data is loaded.

   If the status displays a warning, click Refresh status. If the status displays an error, correct the configuration, click Save, and repeat this step.

8. Click Close.

More information:

User Store Planning

External LDAP Directory Worksheet