EP integration with ADS

[Former Member]

Hello,

We have EP 640 sp 15 on AIX-ORA.

we are trying to integrate with MS ADS.

hostname of EP = devportal

FQDN of EP = devportal.internalgrp.com

Hostname of ADS = demo

Domain Name = addemo.internalgrp.com

without SSL are able to browse the AD store and search users. But we cannot change any user properties in AD through EP.

So we are trying to use SSL, for the integration.

Will this integration work as fqdn of ep and the domain name of ADS is different ?

Also kindly let me know steps on how to do this integration using SSL. how to identify the root certificate that needs to be imported into EP ?

Thank You.

Cheers,

Chetan

[Former Member]

Chetan,

As James already mentioned, it depends on the user with which you are connecting to AD. If the user has read-only rights to AD objects you can not change user properties and so through EP.

Regarding the SSL configuration follow the documenation in this link:

<a href="http://help.sap.com/saphelp_nw04/helpdata/de/7d/77fa735e5f47a2a50b5336fd1b5a61/frameset.htm">Configuring SSL Between the UME and an LDAP Directory</a>

AFAIK on AD SSL is not enabled by default. Furthermore enabling SSL on AD is not covered by above link.

Regards,

Christian

[Former Member]

Chetan,

If you do a readonly Portal UME to your LDAP store, you will not be able to change. You should change schema settings/attributes on the LDAP (AD) itself. Alternatively, you can use an LDAP browser like

http://www.ldapbrowser.com/ ,as long as you have AD permissions to modify attributes.

James