Active Directory - User and Profile Sync

Type

Active Directory Type that MonoSign supports. Supported Active Directory Types : Microsoft Active Directory, Apache Directory Server 1.0.x, Apache Directory Server 1.5.x, Apple Open Directory (Read-Only), FedoraDS (Read-Only Posix Schema), Generic Directory Server, Novell eDirectory Server, OpenDS, OpenLDAP, OpenLDAP (Read-Only Posix Schema), Generic Posix / RFS2307 Directory (Read-Only), Sun Directory Server Enterprise Edition

Domain Ip or Host

Domain IP or Domain Host name that wants be connected to.

Port

Port that wants be connected to. (Default is 389 without SSL and 636 with SSL.)

Use Secure Connection

Defines if connection to the Active Directory will be secure (with SSL) or unsecure (without SSL)

User Base DN

Defines the base DN of Active Directory

User Search Container

Defines the search container. When the required configurations filled, you can select search container under the ActiveDirectory BaseDN. After container selected, you can add additional LDAP filter to your selection

Domain Name

Defines the domain name such as “monoactivedirectory“

Domain User Name

Defines the Domain User Name. The user must have permissions such as (read, write, password reset)

Domain User Password

Defines Domain User Password (This information will be encrypted. Don't type anything if you don't want to change.)

Sample User Name

Defines Sample User Name (Sample User can be used for health check for user authentication)

Sample User Password

Defines Sample User Password (This information will be encrypted. Don't type anything if you don't want to change.)

Use Base DN for User Authentication

Defines if AD Base DN will use for User Authentication

Referral Following

Defines if User Source will follow the referrals

Connection Timeout

Defines the connection timeout for User Source (in seconds)

Use Deleted Base Filter

Ignore Default Directory Properties

Active Directory has a default properties such as sAMAccountName, userPrincipalName. If “Ignore Default Directory Properties“ enabled, user source will ignore the default directory properties by reloading user properties.

Additional Directory Properties

You can add Additional Directory Properties such as msRTCSIP-PrimaryUserAdresses.

Time Skew

If you are using more than one DC or address, using time skew value is good for sync issues (Type in minutes)

Profile Identity Property

If you want to bind this value to your profile information, type your property name.

Deleted Base Filter

Defines deleted base filter for Active Directory users to sync also deleted users

User Search Filter

Defines user search filter for Active Directory users to sync

Group Search Filter

Defines Group search filter for Active Directory users to sync

Deleted Filter

Defines deleted filter for Active Directory users to sync (Default: isDeleted=TRUE)

Text Filter

-

Basic Text Filter

-

Id Filter

-

Exclude Users that has Empty Username

Defines that if users whose don’t have UserName wants to be excluded

Exclude Users that has Empty Email

Defines that if users whose don’t have Email wants to be excluded

SSL Protocol Version

Defines the protocol version for connecting to Active Directory Server.

Supported Protocol Versions : SSL 2.0, SSL 3.0, TLS, TLS 1.1, TLS 1.2, TLS 1.3

Skip SSL Certificate Validation

Defines if Active Directory User Source will skip SSL certificate for the Active Directory connection.

SSL Certificate Thumbprint

Defines the SSL Certificate Thumbprint for the Active Directory connection. For the connection to Active Directory, the Certificate Thumbprint is mandatory if SSL used.

Minimum Password Length

Defines the minimum password length for password change. (Numeric)

Maximum Password Length

Defines the maximum password length for password change. (Numeric)

Minimum Number of Requirement Category

Defines password requirement category count that user need to follow. For example, if you set this value to 3, user will be required to follow 3 password requirement category like at least 1 numeric, 1 letter and 1 upper case. Category number should be between 1 and 5. (Numeric)

Minimum Number of Letters

Defines the minimum number of letters (Numeric)

Minimum Number of Lowercase Letter

Defines the minimum number of lowercase letter (Numeric)

Minimum Number of Uppercase Letter

Defines the minimum number of uppercase letter (Numeric)

Minimum Number of Numeric Characters

Defines the minimum number of numeric characters (Numeric)

Minimum Number of Special Characters

Defines the minimum number of special characters (Numeric)

Allowed Special Characters

Defines the allowed special characters (Text)

Regex Blacklist

Defines the regex blacklist in regex format. (Text)

For example : ^(?!(country1|country2|country3)$).*$

Number of Password History Count

Defines the number of password history count. MonoSign keeps the history count for user behavior. (Numeric)

Number of Failed Login Attempts in a Row

Defines the number of failed login attempts in a row. (Numeric)

For example: User can only {{count}} times fail his/her password in a row. Otherwise user account will be locked

Minutes that Should Have Been Waited to Login After Number of Fail Attempts is Exceeded

Defines that if user exceeds the number of fail attempts, user needs to wait {{count}} minutes to attempts login again. (Numeric) (in minutes)

User Can Change It’s Next Password

Defines when user can change his/her next password (Numeric) (in minutes)

For Example: Let’s assume that example value is 60min. If user changed his/her password just now, user needs to wait 60 minutes to change his/her password again.

User Password Will Expire In

Defines when user’s password will be expired (Numeric) (in minutes)

For Example: Let’s assume that example value is 120min. User’s password will expire in 120 minutes.

Minimum Password Score

Defines minimum password score.

Password Score Types: Very weak, Weak, Medium, Strong, Very Strong, Extreme

You can see how MonoSign calculates the password score below.

Enable Disclaimer Page

Defines that if disclaimer page will be shown before changing user’s password. The disclaimer page will shown to the user just before password change page.

You can see how MonoSign show the disclaimer page.

Enable Success Page

Defines that if success page will be shown after changing user’s password. The password success page will shown to the user just after password change page.

You can see how MonoSign show the success page.

Password Expiration Reminder Email Will Be Sent Before (Days With Space Separated)

Defines when password expiration reminder email will be sent before. (Numeric)

Admin needs to specify the values days seperated.

For Example : 3 5 7

Password Expiration Reminder Channels

Defines which notification reminder channels will be used to inform user’s.

Channels: Web Notification, Push Notification, SMS, Email