If you manage a directory of users on your network outside of PerfectForms™, you can use the synchronize option to dynamically update PerfectForms™ with the contents of your directory. Note that changes to users in PerfectForms™ cannot be migrated back out to your directory at any point; synchronization is a one-way process. The PerfectForms™ system still maintains its own database of users. For each user, only a single unique identifier (e.g. Distinguished Name, or UID) is stored in its database.
When a user logs in, their credentials are verified in the Directory Service. If the authentication is successful, the user is logged in based on the mapping of the single identifier. If the user does not already exist in the PerfectForms™ database, a new user is automatically created in the PerfectForms™ database. This means that every user in the Directory Service is automatically a PerfectForms™ user, even if there is no entry yet in the database.
To synch your directory to PerfectForms™:
1.Go to the Settings Dashboard.
2.In the tree, expand Account Settings > Users > Synchronize.
3.In the details area, configure the call to the directory service. Enter the directory service's host machine IP address, port, and other connection credentials. (** See Note below)
4.The synchronize feature supports use of SSL & Global Catalog. Check the Use SSL & Use Global Catalog checkbox to permit these features. (** See Note below)
5.In the Look Up area, enter the context distinguished name (Context DN) from Active Directory. Optionally, specify a filter (for example, CN=a* which only returns entries where the common name starts with 'a').
6.Check the Include Subcontexts checkbox to allow reading of sublevel nodes inside the Active Directory environment/
7.In Attributes Mapping, sample attributes are supplied but you must enter the Unique ID attribute exactly as it appears in your active directory structure. The attribute name in your system is also needed for First Name, Last Name and Email (for example, userPrincipalName).
8.Optionally, you can automatically assign users to a user-group and/or position. Select the corresponding Synchronize check box under each of those sections and enter the active directory attribute name that contains that information.
9.Auto Synchronize is a feature only supported in the PerfectForms™ On-Premise version. Click Here for details.
10.Optionally, assign a default log-in type. Limited User is selected by default since this option does not use up a license.
11.Additional attributes can be mapped including Domain Username, Phone, Custom ID and more.
12.Click Apply Changes.
13.Click Test Connection. If your connection is not successful, you may have entered incorrect information in the Connection area. Verify your Host IP, Port, and binding.