Hi,
I'm trying the user/group provisioning on Active Directory, in particular I want to create a new group on AD server.
The AD connector capability "Create a Group on an AD server" is able and it is configured as follow:
I also mapped a"Group DN suffix" (i.e. DC=company,DC=local) in the AD Connector in the DN field.
I created a request button in order to trigger a request form, which has the following fields:
- title
- Group Name (string)
- Common Name (string)
- group description
- provisioning command
I have two questions:
1) How can I create an AD group in a specific OU or path?
The paths are not unique so I can not map it in the "Group DN Suffix" in the AD connector settings.
2) How can I populate the AD Group scope "DomainLocal/Unversal /Global" AD attribute througth the request form?
Thank you in advance.
Best regards.
Hi Andrea,
In this instance, I would suggest using a drop down select for the Group Scope. You can display Domain/local/universal/global, but use the relevant value associated with the scope.
You'll have to remove the default value from the AFX capability, and update your provisioning command in the form to use this form value.
For the group location, depending on how many locations are potentially available, you could also do this with a drop down
You would then have to change your provisioning command to include this value.
I've just tested this in my sandbox and it is working correctly.