Importing User Accounts From LDAP

The User Import tab enables you to manually import user accounts from LDAP into SBM. You can use search filters to specify the users you want to import, and then import those users as "copies" of an existing SBM user. Optionally, you can choose to create Contact records for imported users as well.
Note: You must enter LDAP server connection settings and search parameters in SBM Configurator and successfully connect to the LDAP server before importing users. For details, refer to "Configuring LDAP Authentication" in the SBM Installation and Configuration Guide.

To import user accounts from LDAP:

  1. From the Options menu, select LDAP Setup & Tools. The LDAP Setup & Tools dialog box opens to the General tab; select the User Map tab.
  2. Verify that LDAP attributes are mapped to SBM user attributes and Contacts table fields. For details, refer to Mapping LDAP and SBM User Information.
  3. Select the User Import tab.
  4. From the Filter drop-down list, select a search filter or type a new search filter. The search filter you provide depends on how user accounts are organized in LDAP and the type of user accounts you want to import. For example:
    • You may want to include objectClass=SBMSUser (or a similar value, depending on your LDAP configuration) in your search filter to return all LDAP users classified as SBM users.

    • If groups exist in your LDAP system that are similar to groups in SBM, include the group name in your search filter criteria. Other attributes such as organizational unit, department, and title might also be useful.

    • Consider common traits of users as you construct search filters. For example, (telephoneNumber=555*) returns accounts in which users have phone numbers beginning with 555.

  5. Click Search to initiate the search for LDAP users matching the criteria specified in the search filter. When the search is complete, the LDAP users who match the search criteria are listed by LDAP login ID and full name. You can sort the user list alphabetically by login ID or full name by clicking on the column headings.
    Note: The amount of time needed for the search depends on the speed of the connection to the LDAP server and the number of users qualified by the search.
  6. Select the user or users in the list that you want to import. Click Select All to select the entire list of users; click Clear All to clear all selections.
  7. From the Import users as copies of drop-down list, select an SBM user account that serves as a template account for imported users. The product-access type of the selected user template account displays beneath the Import users as copies of drop-down list. Imported accounts contain the values of fields mapped on the User Map tab, along with the product-access type, role assignments, group membership, privileges, preferences, application settings, notifications subscriptions, and password settings of the template account. This process is similar to copying an SBM user account.
    Note: If the template user has a private report specified as a Home Page report or a Quick Link, users whose accounts are imported will receive an error when they run that report. For best results, select a template user whose application settings specify built-in or non-private level reports.
  8. Select the Create Associated Contacts check box to automatically create Contact records for new users. This is similar to creating an associated Contact record from the General tab of the Add/Edit User dialog box. Contact records imported with a user account contain values for the mapped Contact table fields and the values for Contact table fields that are not listed on the User Map tab (First Name, Middle Name, Last Name, E-mail, and Phone Number).
    CAUTION:
    If you import an LDAP user as a contact and later want to import that LDAP user as an SBM user, a duplicate Contact record is created if the Create Associated Contacts check box is selected. An alternative to importing contacts as users is to utilize the "Grant Login" feature available in Contacts records. If you do not select the Create Associated Contacts check box when later re-importing the contact as an SBM user, that user account will not have a Contact record associated it, even though the original Contact record remains in the system. In other words, newly imported users are not automatically associated with existing Contact records. If you import users with the Create Associated Contacts check box selected, new Contact records associated with imported users are created. This applies to users that are automatically added to SBM as well.
  9. In the When User Already Exists area, select one of the following options for handling LDAP user accounts that have the same login ID as SBM accounts. The comparison of login IDs between LDAP and SBM is not case-sensitive.
    • Do Not Modify – Select this option to ignore LDAP user accounts that already exist in SBM.

      Tip: If the user already exists, but does not have an associated resource record, a new resource record is created for that user if you map any resource attributes.
    • Update Mapped Attributes – Select this option to update any mapped attributes that have changed in LDAP. This option is useful for updating information in existing SBM accounts while you import new accounts from LDAP.

    • Replace User/Contact – Select this option to replace existing SBM user accounts with the mapped and template user attributes. This option is useful for quickly modifying multiple user account attributes in SBM. For example, if a user is promoted to a managerial position, you can import that user based on a template from an existing manager's account. The unique database ID for the replaced user does not change so that ownership of primary items is not affected; however, all account attributes, such as product-access type, privileges, preferences, etc., are replaced. Because this option enables you to completely overwrite an existing user's account, use this feature cautiously.

  10. Click Import Now to import selected users. When user accounts are processed, a checkmark displays next to their name. This feature enables you to progressively import users from a single search as copies of different template users.
  11. Click OK to save your settings and exit the dialog box. Click Apply to save your settings and continue working in the LDAP Setup & Tools dialog box.

Related Topics

Introduction to Using LDAP With SBM

General Settings

Mapping LDAP and SBM User Information

Mapping LDAP Users and SBM Contacts

Importing Contact Records From LDAP to SBM

Updating Users and Contacts Via LDAP

Setting LDAP Options