The user import module works transversally in all Aranda applications which have the ARANDA provider by default. This is a standalone user administration/authentication model, where you can create your own users and groups, and also import users from directory servers to make it easier to manage tools and assign permissions to users and groups.
1. To import users, go to the AQM Configuration Console, in the General Settings from the main menu, select the LDAP. In the information view, the list of authentication providers registered in the console is displayed. Select the New and in the detail view you can configure the associated information.
2. In the User Import Detail View in the AQM Configuration Console, select the Configuration, where you can enter the data to establish the connection to your directory server, the parameters of which will depend on your infrastructure.
| Parameter | Description |
|---|---|
| Domain | Controller Domain |
| Server | Directory Server |
| Port | TCP port where the service operates |
| Authentication Mode | Authentication Methods |
| User | User |
| Password | |
| Authentication User Format | Allows you to choose between 2 FQDN or UPN user formats |
| Default Name Context | Path where you want synchronization to start in the directory tree |
| Waiting Time | Maximum response wait time for the synchronization process in minutes |
| SSL | Indicates whether secure protocol applies |
| Use DS Name Distinction | |
| User filter | Filter for user search |
| Filter for Groups | Group filter |
You can test the connection by selecting the Check connection. When finished, click Save.
You can only keep one provider chosen as the default, which will appear as the first option when authenticating to the application.
3. In the User Import Detail View in the AQM Configuration Console, click on the Synchronization, where you can set the synchronization frequency of users and groups. Use time synchronization to determine the time you want to run the process.
⚐ Note: If you have set up your provider, selecting the Upgrade Now You’ll perform small or test syncs that don’t consume large resources or long wait times. If you need to synchronize large numbers of users, it is recommended to make use of programming.
4. In the User Import Detail View in the AQM Configuration Console, select the User Filter, where you can map the fields in your active directory against the user information you want to include in Aranda products.
Example:
5. When you finish configuring the parameters, save the configuration and you will start getting the users as they are incorporated into the system. Users who are synced will not be editable since they come from an external authorization system. In case there is any type of error, these will be consolidated in the EventLog of your server for later analysis.