Skip to content

Synchronize Active Directory User Information with Pleasanter (External Script)

Overview

This explains how to automatically execute synchronization with an LDAP server such as Active Directory. If the following applies to your environment, use this procedure to set up regular execution of the "LDAP Synchronization" function.
・ The version of Pleasanter you are using is 1.3.18 or earlier.
・ The environment has "Integrated Windows Authentication" enabled (regardless of version).

Limitations

  1. The procedure for automatically executing LDAP synchronization has changed since Pleasanter version 1.3.19. If you are using the latest version, please check "Synchronize Active Directory User Information to Pleasanter".
  2. If you leave the settings in this procedure and set it in the procedure "Synchronize Active Directory User Information with Pleasanter (External Script)", the LDAP synchronization process will be started twice, and depending on the settings, you may not be able to log in.

Operation Procedure

Register the script that executes the LDAP synchronization process in the task scheduler.

1. Set LDAP integration

Refer to the manual page below to set up "LDAP Integration".
Linking Pleasanter with Active Directory

2. Execute LDAP synchronization

Execute the LDAP synchronization process by making a request to the URL below (executing the URL in a browser, using the PowerShell Invoke-RestMethod command, etc.). Change {ServerName} to match your environment.

http(s)://{ServerName}/users/syncbyldap

3. Set up regular synchronization

By setting up the task scheduler to periodically synchronize Active Directory information, you can import the latest personnel data into Pleasanter.

  1. Install the script
    Copy the contents of the following file to any folder, such as D:\Tools.
    https://github.com/Implem/Implem.Pleasanter/blob/master/Implem.Pleasanter/Tools/SyncByLdap.ps1

  2. Set up the task scheduler
    Please set the following on the task creation screen. Once you have created the task, right-click it to run it.

Column Settings Description
Task name SyncByLdap Enter any name.
Run whether the user is logged on or not Enabled Runs even when logged off.
Trigger Optional period Starts the script periodically.
Executable program %SystemRoot%\System32 WindowsPowerShell\v1.0 powershell.exe Runs PowerShell.
Add arguments -ExecutionPolicy Bypass -Command ".\SyncByLdap.ps1" Script to be called from PowerShell.
Start D:\Tools Directory where SyncByLdap.ps1 is located.