{"id":12368,"date":"2024-10-17T14:45:06","date_gmt":"2024-10-17T20:45:06","guid":{"rendered":"https:\/\/www.mrc-productivity.com\/techblog\/?post_type=ht_kb&p=12368"},"modified":"2024-10-17T15:06:27","modified_gmt":"2024-10-17T21:06:27","slug":"sync-active-directory-to-menuing","status":"publish","type":"ht_kb","link":"https:\/\/www.mrc-productivity.com\/techblog\/?ht_kb=sync-active-directory-to-menuing","title":{"rendered":"Sync Active Directory to Menuing"},"content":{"rendered":"\n

Introduction<\/h3>\n\n\n\n

Many of our clients utilize Microsoft Active Directory to manage users and group access for their organization. <\/p>\n\n\n\n

Understandably, some clients don’t want to have to also manage the same list of users and roles within the m-Power menuing system. <\/p>\n\n\n\n

This document will walk you through how to program m-Power to pull data from Active Directory and populate your menuing system.<\/p>\n\n\n\n

Global Configuration<\/h3>\n\n\n\n

Open your \/mrcjava\/WEB-INF\/classes\/mrc-runtime.properties file and add the following enties:<\/p>\n\n\n\n

ad_url<\/strong>=ldap:\/\/ip_goes_here:389;domain=yourcompany.com;search_base=DC=yourcompany,DC=com
ad_user_type<\/strong>=SAM
ad_user<\/strong>=user@yourcompany.com
ad_p<\/strong>=password_goes_here
ad_user_table<\/strong>=YOURDD.dbo.MRCSEC1
ad_group_table<\/strong>=YOURDD.dbo.MRCSEC6
ad_user_group_table<\/strong>=YOURDD.dbo.MRCSEC5<\/p>\n\n\n\n

Adjust the ad_url to point at your active directory server. Adjust the domain and DCs accordingly.<\/p>\n\n\n\n

Choose either SAM or UPN for ad_user_type. This controls what piece of user information will be written back to the user specific m-Power tables.<\/p>\n\n\n\n

Specify the ad_user and ad_p who would have access to the various users and groups from active directory.<\/p>\n\n\n\n

For ad_user, ad_group, and ad_user_group, change YOURDD with the data dictionary you would like the data loaded into. You do not need to update the specific table names themselves.<\/p>\n\n\n\n

Implementation<\/h3>\n\n\n\n

The process to load your active directory data into m-Power is done with an External Object.<\/p>\n\n\n\n

Register the External Object<\/h4>\n\n\n\n

Register a new external object with the following rules:<\/p>\n\n\n\n

Class: com.mrc.ext.ADSync
Method: syncADUsers(*DSNAM)<\/p>\n\n\n\n

No parameters are required.<\/p>\n\n\n\n

\"\"\/<\/figure>\n\n\n\n

Calling the External Object<\/h4>\n\n\n\n

Create a maintainer and chose the above external object. Choose the location AFTER ADD.<\/p>\n\n\n\n

\"\"\/<\/figure>\n\n\n\n

After compile, go into Application Properties and set “skip “Skip Database Actions” to Yes.<\/p>\n\n\n\n

\"\"\/<\/figure>\n\n\n\n

Run the application to trigger the Active Directory syncing process.<\/p>\n\n\n\n

Scheduling this Process<\/h4>\n\n\n\n

Surely you will not want to manually run this process manually on a daily basis. Instead, you will want to utilize m-Power’s Messaging & Scheduled Tasks to set this to run on a regular basis.<\/p>\n\n\n\n

In Scheduled Tasks, choose “Call a Maintainer”<\/p>\n\n\n\n

Next, specify the application and add the following into the Additional Maintainer parameters:<\/p>\n\n\n\n

one_step=1&action_mode=add&KEYVALUE=1<\/p>\n\n\n\n

Replace KEYVALUE with whatever field you used as a dimension in your maintainer.<\/p>\n\n\n\n

\"\"\/<\/figure>\n\n\n\n

Once the task is set up, schedule it at the desired interval.<\/p>\n\n\n\n

Other Notes<\/h3>\n\n\n\n
    \n
  • This feature is available with the Oct 2024 version of m-Power.<\/li>\n\n\n\n
  • While nothing will limit you from using the m-Power interface to manage users and roles, it is advised to avoid doing this. Each time you run the syncing process, all data within MRCSEC1, MRCSEC5, and MRCSEC6 is deleted and repopulated. <\/li>\n\n\n\n
  • You are still encouraged to use the menuing UI to manage application and what roles they are allowed to access.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"

    Introduction Many of our clients utilize Microsoft Active Directory to manage users and group access for their organization. Understandably, some clients don’t want to have to also manage the same list of users and roles within the m-Power menuing system. This document will walk you through how to program m-Power…<\/p>\n","protected":false},"author":1,"comment_status":"closed","ping_status":"closed","template":"","format":"standard","meta":{"footnotes":""},"ht-kb-category":[],"ht-kb-tag":[],"class_list":["post-12368","ht_kb","type-ht_kb","status-publish","format-standard","hentry"],"_links":{"self":[{"href":"https:\/\/www.mrc-productivity.com\/techblog\/index.php?rest_route=\/wp\/v2\/ht-kb\/12368","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.mrc-productivity.com\/techblog\/index.php?rest_route=\/wp\/v2\/ht-kb"}],"about":[{"href":"https:\/\/www.mrc-productivity.com\/techblog\/index.php?rest_route=\/wp\/v2\/types\/ht_kb"}],"author":[{"embeddable":true,"href":"https:\/\/www.mrc-productivity.com\/techblog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.mrc-productivity.com\/techblog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=12368"}],"version-history":[{"count":2,"href":"https:\/\/www.mrc-productivity.com\/techblog\/index.php?rest_route=\/wp\/v2\/ht-kb\/12368\/revisions"}],"predecessor-version":[{"id":12371,"href":"https:\/\/www.mrc-productivity.com\/techblog\/index.php?rest_route=\/wp\/v2\/ht-kb\/12368\/revisions\/12371"}],"wp:attachment":[{"href":"https:\/\/www.mrc-productivity.com\/techblog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=12368"}],"wp:term":[{"taxonomy":"ht_kb_category","embeddable":true,"href":"https:\/\/www.mrc-productivity.com\/techblog\/index.php?rest_route=%2Fwp%2Fv2%2Fht-kb-category&post=12368"},{"taxonomy":"ht_kb_tag","embeddable":true,"href":"https:\/\/www.mrc-productivity.com\/techblog\/index.php?rest_route=%2Fwp%2Fv2%2Fht-kb-tag&post=12368"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}