LDAP synchronization

synchronization is available only with the advanced passwork license synchronization allows you to match active directory and ldap security groups with passwork roles you can use windows based domains (active directory) and linux based domains (openldap, freeipa, etc ) to manage access and roles in passwork the synchronization is performed in the following stages an ldap request is executed according to the data entered on the users tab passwork receives a user list, which contains a memberof data array for each user an ldap request is executed according to the data entered on the groups tab passwork receives a list of groups passwork creates a list of groups that have been matched with roles, based on the received group list passwork compares the list of groups matched with roles and the array composed of each memberof array if the data matches, passwork assigns the corresponding roles to the user if the automatically register new users from ldap groups setting is enabled, a check is made to verify that a user, for whom matches were found, is registered in passwork if the automatically deactivate users if they are not part of ldap groups mapped to roles setting is enabled, a check is made to verify that a user belongs to the groups with matched roles if a user is not a member of such groups, they will be automatically deactivated you can use dn filters to create nested groups or users nested objects will be displayed, but group restrictions and role mapping will not apply to nested groups to map roles to security groups, select a security group from the list and click on the plus button on the right then select the roles and save the result 1\ select a group 2\ choose roles to map 3\ save the changes for synchronization to work, you will need to set up background tasks docid\ pj1ekrpvv2ndjc8hbpacp synchronization settings you can configure synchronization settings to automatically deactivate users if they are not part of ldap groups matched with roles automatically register new users from ldap groups choose the type of authorization that will be assigned to users from ldap set the interval for ldap synchronization synchronization log passwork stores synchronization logs as part of the background task history to view the synchronization log, click the go to all logs button at the bottom of the synchronization tab, or select the ldap synchronization filter on the history tab of the background tasks section