Local Active Directory
Menu Path: Settings > Inbound Provisioning > Local Active Directory
Table of Contents
- Overview
- Server Information (Local Active Directory Server Information)
- Administrator Authentication
- Search Options Configuration
- User Search Configuration
- Automatic Synchronization
- Manual Synchronization
- Error Handling
- Caution
Overview
Synchronize users and groups registered in the local Active Directory (AD) server to the Security365 management center.
**Reference:**You can only enable one inbound provisioning method. When you enable local Active Directory synchronization, other methods (SCI Server, Microsoft365, CSV directory synchronization) will be disabled.
Preconditions:
- The local AD server must be configured and accessible over the network from the Security365 server.
- The AD server ports must be allowed on the firewall (LDAP default: 389 / LDAPS default: 636).
Server Information (Local Active Directory Server Information)
Server Configuration
| item | Description | Input Example |
|---|---|---|
| Server Type | Server Type (Non-changeable, Fixed Value) | ACTIVE_DIRECTORY |
| Server URL | AD server address (including protocol) | protocol://domain:port |
| Base DC | Search Criteria Domain Component | dc=yourcompany |
Server URL format: 프로토콜://서버주소:포트
| Connection Method | Default Port | example |
|---|---|---|
| LDAP (Non-encrypted) | 389 | ldap://192.168.1.100:389 |
| LDAPS (Encryption) | 636 | ldaps://192.168.1.100:636 |
**Reference:**Base DC is the input for the organization's top-level domain path. For example, the domain is
yourcompany.comin casedc=yourcompany,dc=comI will input in the format.
Administrator Authentication
| item | Description |
|---|---|
| Admin ID | AD server administrator account ID |
| Admin Password | AD server administrator account password |
To change your password**[Change]**Click the button.
**Caution:**The administrator account must have read permissions for the AD directory. If permissions are insufficient, synchronization failures may occur.
Search Options Configuration
| item | Description | default value |
|---|---|---|
| Search Scope | Search Range | ONELEVEL |
| Page Size | Number of records to fetch at once | 50 |
| Referral | AD reference processing method | FOLLOW |
| Connection Timeout (ms) | Server connection timeout (milliseconds) | 200 |
| Read Timeout | Data Read Timeout (Milliseconds) | 100 |
Search Scope option:
| Option | Description |
|---|---|
| ONELEVEL | Search only the immediate sub-items of Base DC |
| SUBTREE | Recursively search Base DC and all sub-items |
**Reference:**If the organizational structure is complex or needs to be synchronized down to all subordinate OUs (Organizational Units),
SUBTREESelect. The broader the search range, the longer the synchronization time may be.
Referral options:
| Option | Description |
|---|---|
| FOLLOW | Automatically follow and search referenced other AD servers |
| IGNORE | Ignore references and search only on the current server. |
| THROW | Handle as an error when a reference occurs |
**Reference:**Connection Timeout / Read Timeout values should be adjusted according to the network environment and AD server response speed. If the values are too low, timeout errors may occur even in normal environments.
User Search Configuration
| item | Description | Input Example |
|---|---|---|
| Base DN | User Search Starting Location (Distinguished Name) | ou=Org1,ou=Users[ou=Org2],ou=Users |
**Reference:**The Base DN is the path of the OU (Organizational Unit) where the user account is located. You can specify a sub-path that is the same as or more specific than the Base DC.
Automatic Synchronization
| item | Description |
|---|---|
| Automatic Synchronization | Use / Do not use selection |
| Synchronization Period | When using automatic synchronization, set the time (hour/minute) to run daily. |
Manual Synchronization
After saving the settings, on the local Active Directory card of the inbound provisioning list screen**[Manual Synchronization]**Clicking the button will execute synchronization immediately.
**Caution:**Duplicate execution is not possible while synchronization is in progress.
Error Handling
| Error situation | Check Items |
|---|---|
| Server connection failed | Check Server URL format and port number / Check if firewall port is open |
| Authentication failed | Admin ID / Admin Password Check / Account Lock Status Check |
| User/Group Missing | Check Search Scope Settings / Confirm Base DC, Base DN Path |
| Timeout error | Connection Timeout / Read Timeout value increase setting |
Caution
- The network connection between the local AD server and the Security365 server must be smooth. Please check in advance whether the ports are open in the firewall policy.
- When using LDAPS (encrypted connection), certificate configuration may be required. Please contact the responsible team depending on your environment.
- Even if you directly modify the synchronized user information in the management center, it will be overwritten with the original information from the AD server during the next synchronization execution. If permanent changes are needed, please modify it on the AD server first.
- If the Connection Timeout / Read Timeout value is set too low, timeout errors may occur even in a normal environment.
- You can only activate one inbound provisioning method, and if another method is already activated, you must use it after switching.