LDAP Customer to company mapping

[puktar]

Hello,

I have a setup with different "companies" all the members of these customers are member of specific AD groups in one big AD. All the users are in one big baseDN.
I want to auto sync the users in these groups to the company. Ad auth is working, AD sync for agents is also working so I get the general idea.

I am thinking of making multiple customer AD syncs with different (memberof) filters and hardcoding the mapping in the customerID field per sync.
So
User1 is memberof CompanyA group in AD.
So I map UserCustomerID1 to CompanyID - CompanyA in my CustomerUser1 MAP fields.


However I can't imagine that this is the most efficient way of doing this.

Is there an easier way? Since this also means I can only have 11 customer definitions.

[paulfolkers]

Hi,

a mapping to a company name does only work with a mapping between CompanyID and a specific AD field.
As the memberOf contains the whole DN of the group, this won‘t work. But if you can fill another AD property with the desired company name, you could probably use that.

BR, Paul