LDAP Tools

Overview

This Plug-in provides the ability to update Appian user profiles from data retrieved from an LDAP server. The data that can be synchronized include all the default user profile fields except the username (e.g. first name, last name, address, phone, supervisor, title, etc…) as well as the custom fields.

Key Features & Functionality

  • LDAP User Profile Synchronization (Smart Service) - available in the Process Modeler under Integration Services > Connectivity Services
  • LDAP Sync Process Model (Sample Process Model) - will need to be tailored and tested based on identity management requirements
  • ldapSearch() Function - returns an array of LDAP attributes for a specific search query

See the instructions documentation (attached PDF) and https://community.appian.com/w/the-appian-playbook/520/ldap-synchronization for more information.

Anonymous
Parents
  • We are on 17.2 On prem setup. We are using LDAP User Profile Synchronization smart service. We have a issue were some users are not able to access Appian. While debugging this, we found that these users are part of "usernamesFailed". How can i find the reason for failure?

  • Hi @madhan84. Do your users have username, email address, first name, and last name? Appian requires those four profile fields for a valid user account. Another thought is to check the log files. If debugging is enabled for the LDAP plugin, the logs will capture the usernames that failed to synchronize.

Comment
  • Hi @madhan84. Do your users have username, email address, first name, and last name? Appian requires those four profile fields for a valid user account. Another thought is to check the log files. If debugging is enabled for the LDAP plugin, the logs will capture the usernames that failed to synchronize.

Children
  • It may also be the case that their usernames are invalid Appian usernames (use invalid characters) so they aren't being created.

    A username can only contain letters, numbers, and the following special characters: @ . _ - .
    It must not match an existing username regardless of case. For example, if john.doe already exists, you cannot enter JOHN.doe