Active Directory management & automation

Configure the Active Directory Pane

The Active Directory pane located on the Web Interface Home page can be configured to display managed Active Directory domains, specific Active Directory objects or even Business Units. Using the pane, frequently used AD objects can be added directly to the home page for faster access. For example, to allow users to get a list of employees of a particular department, you can add a group or Organizational Unit for the necessary department to the Active Directory pane. Moreover, you can configure the pane to display different objects depending on who is logged in. For example, the Active Directory pane can display the domain of the logged in user or the Organizational Unit where they are located.

In the Active Directory pane, users can see only the objects they are allowed to view. The appropriate permissions are controlled with the help of Security Roles.

In this tutorial, you will learn how to customize the Active Directory pane to display managed Active Directory domains, specific Active Directory objects, Business Units, and also how to organize objects into groups.

On the computer, where the Web Interface is installed, start the Web Interface Customization tool.


In the Interface type drop-down list, select the Web Interface you want to configure.

Activate the General tab and click Configure Active Directory Pane.



Now, you need to specify what will be displayed on the Active Directory pane.

Managed Domains

If you want the Active Directory pane to display AD domains managed by Adaxes, select the Show managed Active Directory domains option.

View Screenshot

Specific AD Objects

If you want the Active Directory pane to display specific AD objects and/or Business Units, select the Show the following Active Directory objects option.

Adding Objects

To add an object to the Active Directory pane:

  1. Click the Add button located on the right side of the dialog.
  2. Click the button located to the right of the Object DN field.

    Displaying Objects Based on the Logged in User

    Apart from displaying specific AD objects, the Active Directory pane can also display different objects depending on who is logged in. For example, the pane can be configured to display the manager of the logged in user.

    How to add

    To add such an object, you need to specify how it is related to the logged in user. To do this, instead of picking a specific AD object, use a template. Such a template will be used to build the Distinguished Name (DN) of the object to display. To include properties of the logged in user, use value references. The value references will be substituted with property values of the user. For example, if you specify %manager%, this value reference will be replaced with the Distinguished Name (DN) of the user's manager. In other words, when someone logs in, they will see their own manager in the Active Directory pane.

    Examples

    • %manager% - Manager of the logged in user.
    • %adm-ParentDN% - The Organizational Unit where the logged in user is located.
    • %adm-DomainDN% - The Active Directory domain of the logged in user.
    • CN=%department%,CN=Users,DC=example,DC=com - The %department% value reference will be substituted with the name of the department of the logged in user. In other words, each user will see an object that has the same name as the user's department and located in CN=Users,DC=example,DC=com.
    • OU=Contacts,%adm-DomainDN% - The %adm-DomainDN% value reference will be substituted with the Distinguished Name of the AD domain of the logged in user. So, each user will see an Organizational Unit named Contacts located in their Active Directory domain.

    Specify a template you need in the Object DN field. To select a value reference for a property, click the button at the right side of the field.

  3. Select the necessary object from the list and click OK.

    The Active Directory pane can also display Business Units. To select a Business Unit, choose the Business Units item in the Look in drop-down list.

    View screenshot

  4. When done click OK.

Grouping and Ordering Objects

You can organize objects in the Active Directory pane into groups and specify the order in which they appear.

To add a group to the Active Directory pane:

  • Click the Add Group button located on the right side of the dialog.
  • Type a name for the group.

  • Press Enter.

To add a new object to a specific group:

  • Select the necessary group.
  • Click the Add button.

To add an existing object to a group, and also change the order in which objects and groups appear:

  • Select the object or group you need.
  • Drag it to the new location and drop there.
    - OR -
    Use Move Up and Move Down buttons.


When finished, click Apply.
? Waiting

Progress status: Checking...