Hi Ian,
I have the same problem: I need to create an account on AD with a dynamic DN since the OU could be different.
I've seen that the DN Suffix mappings could be useful for this purpose but I wasn't able to find anything helpful on doc that can explain how to use it.
Can you please tell me where I can find some doc about it? I'd appreciate if you please could provide an example on how that field should be poòulated.
Thanks a lot
Marta
You may want to post a new question and reference this one as questions already marked as answered may not get visibility.
I created a new post so that this would get attention. People may not respond to a closed thread from an earlier time.
I see that you opened an RSA Customer Support case 01699872 for this issue as well.
I also encourage you to reach out to RSA Professional Services who has experience in this type of request.
Hi Marta!
I suggest you take a look at this answer from another post that answers some questions about the DN suffix mappings and the cohering AFX attribute mapping
https://community.rsa.com/message/872756?commentID=872756#comment-872756
Thanks Johan!
The original thread is in the Partner Community if you have access to that:
AFX AD connector, "DN suffix mappings"
Or search for "DN Suffix mappings" in quotes for more information (not all of it good).
If I remember correctly the DN Suffix mappings works correctly when configured correctly. But it is simple. It is not configurable and not customizable. It picks DN's from the list you provide and AFX will provision them correctly. It is limited to only a few DN's. If you need anything else, for example if you want control over the DN, if you want the DN in a form, of you want to modify the DN in your workflow, do not use DN Suffix mappings. This is a turnkey solution and it has parts that are hard coded for this specific use case. If you need a custom solution request one from RSA PS.
Thank Ian,
with the support I was able to understand how to properly use the DN Suffix Mapping and to understand its limit.
Now that I have the 2 possibilities (Dn Suffix mappings and workflow) I can chose the option that best suites us.
Thanks again for your help.
Marta
Thank Ian,
with the support I was able to understand how to properly use the DN Suffix Mapping and to understand its limit.
Now that I have the 2 possibilities (Dn Suffix mappings and workflow) I can chose the option that best suites us.
Thanks again for your help.
Marta