Synchronizing user accounts and roles with LDAP
Synchronization with an LDAP directory can be used to automate the user account administration in Creatio. Users, whose accounts have been synchronized with LDAP, can log in with their domain user name and password.
Creatio supports synchronization with Active Directory and OpenLDAP.
The synchronization procedure consists of three stages:
1.Performed once, unless LDAP directory structure changes. The setup is needed to enable the synchronization functionality in the system. Also, you will need to set up Active Directory user filtering. Learn more in the “Setting up Active Directory user filters” article.
2.Connecting Creatio items (i.e. users and organizational structure elements) to the respective items in the LDAP directory. This step is performed when adding new users or organizational roles. You can connect existing Creatio user accounts or import users from LDAP directory by creating connected records in Creatio automatically.
3.Synchronization of Creatio users and organizational structure elements with the connected LDAP directory elements. This step is required to update data in Creatio in order to reflect changes that occurred in the LDAP directory since the last synchronization. The regular synchronization is performed either automatically, or when initiated by the [Synchronize with LDAP] action in the [Organizational roles] section.
Note
Each organizational role is an element in a tree-like structure of roles, where each element is an organization or a department.
Contents
•Setting up Active Directory user filters
•Link LDAP elements to Creatio users and roles
