Skip to content

Integrate Pleasanter with Active Directory

Overview

Pleasanter can automatically import users and security groups from Active Directory (hereafter "AD"). In organizations where user and department information is centrally managed and regularly updated in AD, you can manage users easily just by importing the user and security group information from AD.

Cautions

  1. Pleasanter imports departments using the department code as the key. If the department code matches, the department is overwritten as the same department even when the department name has changed. Therefore, when the department name of an AD user is changed, the department name in Pleasanter is changed by the synchronization.
  2. To synchronize AD security groups, you need to use "DirectoryServices", a library provided by Microsoft. For Pleasanter to use this library, the following conditions must be met.
    1. Pleasanter is built on a Windows environment (it cannot be used on a Linux environment).
    2. DsProvider in Authentication.json is set to "null" (it does not work when "Novell" is set).
  3. Pleasanter imports groups using the objectGUID of the AD security group as the key. Therefore, a group is overwritten as the same group even when the group name has changed. When you delete an AD security group and create a new security group with the same name, it is registered as a separate, new group in Pleasanter because the objectGUID is different.
  4. A user synchronized from AD to Pleasanter cannot change the password from Pleasanter.
  5. Do not edit departments, groups, or users synchronized with AD on the Pleasanter side. Even if you edit them on the Pleasanter side, they are overwritten with the latest information from AD at the next synchronization.

Edit configuration file

  1. Edit Authentication.json and configure LDAP settings.
  2. Restart the web server or restart the application.