Common LDAP Import and Update Options

The options described in this topic are applicable to multiple LDAP import and update types.

LDAP Search Settings

LDAP Attributes Sample Data

This section contains sample data to assist you in mapping LDAP attributes to SBM attributes. Initially, the section does not contain any information. Click Apply to populate the section with LDAP attributes and sample data from your LDAP store. Click Apply again to see sample data from other users or groups in your LDAP directory.

User accounts are listed based on the order they are stored in the LDAP directory.

Find Candidates Options

Use this section to query LDAP for a list of potential candidates to import into SBM. You can then select candidates to import.

  • Find

    Click to initiate the search for LDAP users matching the criteria specified in the search filter. When the search is complete, the LDAP entries that match the search criteria are listed.

    Tip: If the desired record is not found, click Apply at the top of the page, and then try again.
    Note: The amount of time needed for the search depends on the speed of the connection to the LDAP server and the number of records qualified by the search.
  • Filter
    Select a search filter or type a new search filter. The search filter you provide depends on how accounts are organized in LDAP and the type of accounts you want to import. For example:
    • To find users, you may want to include objectClass=SBMUser (or a similar value, depending on your LDAP configuration) in your search filter to return all LDAP users classified as SBM users.

    • If groups exist in your LDAP system that are similar to groups in SBM, include the group name in your search filter criteria. Other attributes such as organizational unit, department, and title might also be useful.

    • Consider common traits of users as you construct search filters. For example, (telephoneNumber=555*) returns accounts in which users have phone numbers beginning with 555.

    • When you schedule an import or update for groups, note that all of the LDAP settings that you enter in SBM are saved except for the specific group selections that you make in the Find Group Candidates section. This means that a scheduled group import or update applies to every group that matches the Group Query filter; not the individual groups that you selected under the Import column. Therefore, when you create a scheduled group import or update, consider inserting a specific group name (like (&(objectclass=groupOfUniqueNames)(cn=MyLDAPGroup)) in the Group Query field) if you want to target a specific group.
  • Import

    Select candidates you want to import.

  • Exists in SBM

    A disabled check box indicates that a record matching the LDAP attributes already exists in SBM.

  • Login ID

    Listed for user imports. Indicates the value that will be used for the SBM login ID.

  • Name

    Listed for user and group imports. Indicates the value that will be used for the name in SBM.

  • First Name

    Listed for contact imports. Indicates the value that will be used for the contact's first name.

  • Last Name

    Listed for contact imports. Indicates the value that will be used for the contact's last name.

LDAP Logging and E-mail Options

Use these options to send a copy of the import log file by e-mail when the import process completes and to send e-mail messages to newly imported users.

The Notification Server must be configured and running to send import logs and new user confirmations. On-premise customers use SBM Configurator to manage the Notification Server. The Notification Server is enabled in on-demand systems.

Change these options as needed: