Configure the Active Directory Connector v2
The Active Directory Connector (ADC) receives Active Directory user updates and automatically makes the same changes in your GoTo account. Setting up the ADC consists of adding permissions, adding Active Directory groups, setting the polling rate, and mapping attributes. In this article, you can:
- Set connections
- Add (or remove) Active Directory groups
- Set polling interval
- Edit attribute mapping (optional)
You need an admin account for Windows and a GoTo admin account.
1. Go to the disk location where you installed the ADC and double-click ActiveDirectoryConnectorAdmin.exe to start the ADC. Click Yes to confirm, and the Active Directory Connector Admin software will launch.
2. Under Permissions, go to the ADC Service box and click Link your Windows user account to the ADC service. This establishes permissions for the service on Windows.
3. Enter your Windows credentials and click OK. If you want to use a different Windows domain account to use with the Active Directory Connector service, click Change user, then fill in your desired credentials and click OK to confirm.
4. Next, log in with your GoTo Account, which is required to also have an Organization Admin role. You will be asked to grant access to your GoTo account for the Active Directory Connector. Click Allow to continue.
5. Once logged in, the user for each account is displayed. Click Save at the bottom of the window. Optionally, you can click Revert Changes to delete any modifications made since the last Save.
6. Next, you will need to add your Active Directory groups.
You can add as many Active Directory groups as you need. Nested groups are added when you add the parent group.
1. Under Active Directory Groups, click Add. The Windows groups manager displays.
2. Type in a group name in the Enter the object names... box and click Check Names. This verifies the group exists and is accessible. (You can also use the Advanced option to locate groups by query).
3. Click OK to add the group. Continue until you have added all required groups.
4. Select any group and click Remove to delete the group.
IMPORTANT: When you remove a group, any users in that group remain in the system, but lose their product entitlements.
5. After each update, click Save at the bottom of the window. Optionally, click Revert Changes to delete any modifications made since the last Save.
6. Once all of your user groups have been added and the changes are saved, you will need to proceed to the next steps to set your desired polling interval.
1. Under Options, enter the number of minutes you want the ADC to wait between polls.
Note: The default polling interval is 15 minutes.
2. After each update, click Save at the bottom of the window. Optionally, click Revert Changes to delete any modifications made since the last Save.
3. If you do not need to map attributes for the ADC, you can click Save to save all of your changes, then click Check connections to verify your permissions.
4. Click Start to begin running the ADC service.
User attributes are data fields in string format. A standard set of user attributes - employeeNumber, costCenter, division, and department - are available from the Active Directory. These values can be used to validate the users for entitlement in User Sync.
1. Click Map attributes under Options.
2. Modify the attributes as necessary and click OK.
3. After each update, click Save at the bottom of the window. Or click Revert Changes to delete any modifications made since the last Save.
4. You are now ready to run ADC v2.