ADSI connection firewall flow opening between Saviynt and the AD Domain Controllers

[sdey_2023]

Hi Team,

As part of ADSI connection, do we need to open the firewall port between Saviynt and the AD Domain Controllers? As per the connection architecture in ADSI integration guide provided, it shows that Saviynt connects with IIS server only and the ADSI agent in turn communicates with the Active Directory. So, if we go by the guide there will be no communication between Saviynt and AD directly. The link of the guide is given below:

https://docs.saviyntcloud.com/bundle/ADSI-v55x/page/Content/Connection-Architecture.htm

Please let us know if anyone has any insights regarding the same. Thanks.

[sahil]

This is correct. Saviynt will only communicate to the IIS server where ADSI agent is installed and the further communication will happen between ADSI to AD. So no direct communication link is required between Saviynt and AD if you are using ADSI agent.