5 Replies Latest reply on Aug 26, 2013 7:31 AM by Srinath Menon-Oracle

    map ldap and ucm

    Mohan Basavarajappa

      how do we map ldap info (roles and groups) with ucm roles and groups? do we've to create same roles and account in ucm as in ldap (read some where in documentation). so this becomes manual activity.

      is there any auto sync-up happening between ldap and ucm data?

        • 1. Re: map ldap and ucm
          Jonathan Hult

          What version of UCM are you using (10g or 11g)?

           

          Jonathan

          http://jonathanhult.com

          • 2. Re: map ldap and ucm
            Mohan Basavarajappa

            i am using UCM 11g

            • 3. Re: map ldap and ucm
              Srinath Menon-Oracle

              Hi Mohan ,

               

              Not necessary that you have to create the same set of roles in UCM . You can use credential maps and map the ldap groups to ucm roles.

               

              For eg :

               

              On LDAP you have set of groups which are same as contributor (on ucm) . Then create a credential map and use it map the ldap group to contributor .

               

              Check on this forum for lot of posts on credential maps and how to use it .

               

              Hope this helps .

              Thanks,

              Srinath

              • 4. Re: map ldap and ucm
                Mohan Basavarajappa

                hi srinath

                 

                you meant ucm roles can be mapped to ldap groups. hope i am getting you correct understanding.

                Is it possibel to map accounts too? and how does the differentiation happen at UCM level (b/w ucm roles and accounts to ldap)

                i understand that there is no manual sync-up action required between ldap and ucm. once new users is created on ucm, automatically it will be recognized and imported onto UCM, Right? is there anything like once you've login with that user onto UCM for things to get activiated.

                 

                thanks for your inputs

                • 5. Re: map ldap and ucm
                  Srinath Menon-Oracle

                  Hi Mohan ,

                   

                  you meant ucm roles can be mapped to ldap groups

                  Re-phrasing your post - LDAP groups can be mapped as WCC roles .

                   

                  Is it possibel to map accounts too? and how does the differentiation happen at UCM level (b/w ucm roles and accounts to ldap)

                  Yes , accounts are mapped as well from LDAP to UCM . By default the operator used to denote an account on LDAP is "@"  . So , when WCC checks the ldap user for it's groups and finds one with the prefix , it will take it as account and map it to the user .

                   

                  once new users is created on ucm, automatically it will be recognized and imported onto UCM, Right? is there anything like once you've login with that user onto UCM for things to get activiated.

                  LDAP users whicever are provisioned for WCC will be able to login provided the "authentication provider" is set up correctly . These users will have to login atleast once to the server if they are to be added in some metadata fields like ACL User Access List .

                   

                  Thanks,

                  Srinath