Adding a Subset of Domain Objects as a Domain Controller

You can add a subset of domain objects (organizations, users, and groups) from an LDAP-based domain controller as a separate entity in the Command Center using LDAP attributes and filters.

This task is useful when configuring domain controllers for a mutli-tenant environment. For more information, see Examples of Configuring Domain Controllers for Multi-Tenant Environments.

Procedure

This procedure demonstrates how to register an organization within an AD domain controller using the base DN (distinguishedName) attribute.

1. From the navigation pane, go to Manage > Security.

   The Security page appears.

2. Click the Identity servers tile.

   The Identity servers page appears.

3. In the upper-right corner of the page, click Add.

   The Add domain dialog box appears.

4. On the LDAP tab, from the Directory type list, select LDAP server.

5. Enter the access information (Host, Username, and Password) for the domain controller.

6. Under Attribute Map, in the base DN row, click the edit button .

7. Replace the default value [baseDN] with the distinguishedName attribute for the AD organization that you want to add.

   For example, an organization named Finance in the domain controller CompanyA might have the distinguishedName attribute OU=Finance,DC=CompanyA,DC=com.

8. Click the check button to save the new base DN value.

   Note

   Similarly, you can edit the User group filter and User filter attributes to further filter the groups and users you want to include in the domain controller entity For more information, see Domain Controller Settings for an LDAP Server.