Announcing the Saviynt Knowledge Exchange unifying the Saviynt forums, documentation, training,
and more in a single search tool across platforms. Read the announcement here.
This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject
Help
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

Kindly advise the connector to use for AD integration

rakeshc
New Contributor
New Contributor

‎04/26/2023 08:48 PM - edited ‎04/27/2023 04:54 PM

Hi All,

We have Active Directory with two domains contained within a forest. Domains have trust relationship. We would need IGA to manage users in both the domains. We have users from one domain reporting to managers present in other domain. We have read through the Saviynt docs but have the following queries,

1. ADSI can manage both the domains but the document mentions there are only few attributes supported for import as shown below,

rakeshc_0-1682566205511.png

We have lot of extension attributes used in AD. Does ADSI connector supports extending the schema?

2. We can go with two AD connectors - one for each domain. In this instance, does the connector would be able to pull the manager information (as manager can be present in other domain). Any challenges from provisioning perspective.

3. We would also need to manage exchange mailbox. If we go with two AD connectors, do we need multiple Win-PS Connector?

Thanks in Advance!

Labels:
0 Kudos
1 REPLY 1

SB
Saviynt Employee
Saviynt Employee

‎05/02/2023 03:01 PM

ADSI does support extension attributes and you should be able to map them.

https://docs.saviyntcloud.com/bundle/ADSI-v2022x/page/Content/Appendix.htm

ADSI does support cross domain prov especially for the Manager though using AD connector will cause issues. 


Regards,
Sahil
Copyright © 2024 Khoros, LLC