Multiple OUs to import AD account

[Ankyt19]

Hi Team,

Can we use 2 OUs in search filter to import accounts from ?We have 2 OUs one for active accounts and another for inactive ( inactive accounts is a part of root DN in AD ) but we cant use root DN as other OUs are not required to be part and they belong to other connection import .

Example: ABC.XYZ.com is AD 

We need OU=activeusers,DC=ABC,DC=XYZ,DC=COM and also OU=inactiveusers,DC=ABC,DC=XYZ,DC=COM accounts to be imported to same endpoints/connection .

Please let me know if any possibility or workaround with syntax ?

@JSON @rushikeshvartak  #JSON #Endpoint #Saviynt #SSM  #activeDirectory 

@avinashchhetri  @ashisht @Neeharika  @Harish_Yara @VikramIngale 

Thank you

Ankit

[rushikeshvartak]

Use Advance_filter_json

{"AdvanceFilter":{ "OU=Administration,DC=saviynt,DC=net": [ "(objectClass=*)" ], "OU=Admin,DC=CORP,DC=saviynt,DC=net": [ "(objectClass=*)" ] }}

https://saviynt.freshdesk.com/support/solutions/articles/43000615764-active-directory-ad-connector-g...

[Ankyt19]

Thanks

I checked that only in AD connector guide as well

Will try .

Also any idea how we can differentiate/custom correlation rule ?

Like a a part of OU , we dont have to correlate ?  Based on certain attribute in AD ? or we can give name of OU?

Like: OU=Ankit has 2 10 sub OUs , and out of that I dont want to have one of the OUs to be correlated as account 

[rushikeshvartak]

You can exclude particular OU using advance_config_json. 

For Correlation - You can use advanced query (case when .. then) under endpoint & write your logic if DN contains OU=SubOU then wrong correlation  user.username=accounts.customproperty50.

[Ankyt19]

Syntax to exclude OU using advance_config_json?

@rushikeshvartak 

[rushikeshvartak]

How many distinct OU u have

[Ankyt19]

I want to exclude 2 OUs and also 2 OUs I want to include 

[rushikeshvartak]

Specifying all ou you want in filter

[Ankyt19]

Hi @rushikeshvartak ,

If I want to exclude users while correlating account can we put certain attribute not equal to?

{
"AdvanceFilter": {
"OU=ankyt,DC=abc,DC=xyz,DC=com":
["(&(objectCategory=person)(objectClass=user){co!=India})"],
"OU=rushikesh,DC=abc,DC=xyz,DC=com":
["(&(objectCategory=person)(objectClass=user)(co!=India)"]
}

}

co!= India i have added is that right method ? or can we have any particluar syntax you might have tried ?

Thanks

Ankit

[rushikeshvartak]

!co=India