To import Member only from AD

[NM]

Hi Team,

We want to import "Member" attribute from AD and not MemberOf attribute from AD, has anyone done the same configuration for AD connector?

Thanks

[rushikeshvartak]

Did you tried it ? if yes what is error you are getting ?

[NM]

Hi @rushikeshvartak , It is importing the entitlement but the mapping between account and entitlement is not happening.

[rushikeshvartak]

Please share json

[NM]

Hi @rushikeshvartak , Here mapping json

{"importGroupHierarchy" : "false","performGroupAccountLinking": "true","entitlementTypeName": "member","groupAccountMappingAttributeName":"member","incrementalTimeField": "whenChanged", "groupObjectClass":"(objectclass=group)", "mapping": "entitlement_value:distinguishedName_char,entitlement_glossary:description_char,RECONCILATION_FIELD:entitlement_value"}

[Raghu]

@NM  check below article it will help full

https://forums.saviynt.com/t5/identity-governance/deleting-multi-valued-attributes-in-openldap/m-p/5...

[NM]

Hi @Raghu , It is sort of a Custom LDAP configuration, I am just trying to find out a way to do it directly from AD connector .. just pulling in member instead of memberof

[rushikeshvartak]

Its not supported only memberof entitlement type is supported currently

[NM]

@rushikeshvartak , we are 24.2 was anything changes because it does import the entitlementtype(Member).

[rushikeshvartak]

Yes its possible some one also done testing in past but code have hardcoded memberOf hence it won;t work. will share thread once found

[NM]

Hi @rushikeshvartak , Yes please Thanks!!.. timelines are quite tight for AD onboarding.