Make Employee ID a Required Property & Specify its Format

With the help of Adaxes, it is possible to specify the format for any property of Active Directory objects. Also, Adaxes allows setting any AD property as required without modification of the Active Directory schema. In this tutorial, you will learn how to make the Employee ID property mandatory and make sure this property is formatted correctly.

To configure Adaxes to verify that the Employee ID property is always specified and validate the format of this property, you need to create a Property Pattern for the User object type and specify certain constraints for the Employee ID property.

Launch Adaxes Administration Console, right-click your Adaxes service, point to New and click Property Pattern. The Create Property Pattern wizard will open.

Enter the name for the new Property Pattern and click Next.

Here you need to select the AD object type, properties of which the new Property Pattern will affect. As we want to set certain constraints for the Employee ID property of user objects, select User in the Object Type list and click Next.

At the Configure Property Pattern page, you can specify value generation options and formatting constraints for the AD properties you need. Click Add, select the Show all properties option in the drop-down list and select the Employee ID property.

In the Add Property Pattern Item dialog that opens, perform the following steps:

• Select the The property is required option.
• Select the Must match regexp option.
• In the edit box for the selected option, specify the regular expression to verify the format of the Employee ID property.
• Click the icon located next to the edit box and specify the error message that will be shown if an employee ID has an invalid format.

Optionally, specify the minimum and maximum value length for the Employee ID property and provide a template for automatic generation of the property values. When finished, click OK and then click Next.

Here, at the Activity Scope page, you need to specify where in Active directory a user must be located or to what groups or Business Units it must belong to be affected by the Property Pattern. Click Add.

In the Property Pattern Activity Scope dialog, select one of the following items:

• All Objects - select if you want this Property Pattern to be effective when creating or modifying any user in any AD domain managed by the Adaxes service.
  
  
• Specific Domain - select if you want this Property Pattern to be effective when creating or modifying any user in the AD domain you specify.
  
  
• OU or Container - select if you want this Property Pattern to be effective when creating or modifying any user located under the selected OU or container.
  
  
• Group - select a specific group if you want this Property Pattern to be effective when modifying users that are members of the selected group.
  
  
• Business Unit - select a Business Unit if you want this Property Pattern to be effective when modifying users that are members of the selected Business Unit. To view available Business Units, select the Business Units item in the Look in drop-down list.

Select the item you need and click Add. When finished, click OK.

The specified activity scope items will be displayed in the Assignments list. Click Finish.

Now, when the Property Pattern is complete, Adaxes will verify that the Employee ID property is always specified for AD users and that the values of this property correspond to the specified regular expression.