Guide for AD group management using ADSI connector

[gurpreetchanna]

Hi, 

We are working on configuring AD group management (create /update/ delete) within Saviynt. We have a single forest multi domain AD environment, say Parent Domain - Sub Domain 1 , Sub domain2, Sub Domain3. 

AD group creation is required in all of the sub domains.  

Kindly assist on below queries - 

1. It's recommended to us in other forums that ADSI connector should be used for AD group creation.  

2. We are not able to find guide to configure ADSI Endpoint for group management. Link to configuration guide would be helpful. 

3. While configuring this, can we keep reconciliation connection as Active Directory and Provisioning as ADSI connection. 

4. Since there are multiple OUs in which we need the group creation. ' advanceGroupFilter' would be used. So user can select the correct OU on the group creation page. Does this limit the import of groups from other OUs in which group creation is not required ? 

[rushikeshvartak]

Refer https://docs.saviyntcloud.com/bundle/ADSI-v24x/page/Content/Managing-Active-Directory-Groups.htm

[gurpreetchanna]

Hi @rushikeshvartak ,

Thanks for the link to the guide. Can you also suggest on below queries. 

3. While configuring this, can we keep reconciliation connection as Active Directory and Provisioning as ADSI connection. 

4. Since there are multiple OUs in which we need the group creation. ' advanceGroupFilter' would be used. So user can select the correct OU on the group creation page. Does this limit the import of groups from other OUs in which group creation is not required? 

[rushikeshvartak]

• 3. While configuring this, can we keep reconciliation connection as Active Directory and Provisioning as ADSI connection. - You can do but it will be applicable for normal account provisioning also
• 4. Since there are multiple OUs in which we need the group creation. ' advanceGroupFilter' would be used. So user can select the correct OU on the group creation page. Does this limit the import of groups from other OUs in which group creation is not required?  - Yes it will limit import also. You can customize the gsp

[GauravJain]

Hi @rushikeshvartak - we are facing similar issue where the "Application Name" field on "Manage ADSI Groups" screen is not getting populated for the selected Group(which we want to modify). Does it also require customization in gsp file? For "Create ADSI Groups" function we have modified "create.gsp" to make sure "Application Name" dropdown gets populated with group containers information.

Please suggest.

Regards

Gaurav

[rushikeshvartak]

You need to modify gsp

[GauravJain]

which one? we have following 4 files for ADSI: "create.gsp" is used for "Create ADSI Groups" screen so excluding it

show.gsp / roledetail.gsp / objectAndPermission.gsp

[rushikeshvartak]

• Create.gsp and show.gsp
• create for new adsi group
• show for existing adsi group

[GauravJain]

can you please share an example of what and where the modification is required to populate "Application Name" for selected group for modification? any document link for reference?