Mapping the user properties and groups

BlueCielo Meridian Enterprise 2016 Administrator's Guide

You are here: BlueCielo Meridian Enterprise Administrator's Guide > About Meridian network administration > About Meridian user administration > Synchronizing user groups with Active Directory > Mapping the user properties and groups

Mapping the user properties and groups

By default, ADSyncUsers.exe uses a default mapping of Active Directory user properties to Meridian user properties. You can map the Meridian properties to different Active Directory properties by specifying the property mappings in the ADSyncUsersConfig.ini file. No default group mappings are provided and you must specify those in the file.

To edit the user property mapping:

Open ADSyncUsersConfig.ini in any text editor. It is located in the same folder as the program.
Find or create the FieldMapping section in the file. The section heading is followed by lines that each specify a Meridian user property name and its corresponding Active Directory property alias.
Change the Meridian property name on the left side of the line or change the Active Directory property alias on the right side of the line.

Save your changes and close the file.

If a Meridian property is not specified in a mapping or the name is specified incorrectly, the property will not be synchronized. If an Active Directory property alias is specified incorrectly, the default mapping will be used.

Not all of the Active Directory properties are available to be mapped. The Active Directory properties that are available to be specified in the mapping and the default mappings are listed in the following table.

Available Active Directory aliases and corresponding properties
Meridian user account property	Active Directory alias	Active Directory user object property
Account	ADPrincipalName	PrincipalName
Address¹	ADComputedAddress	StreetAddress + PostOfficeBox + City + State + PostalCode + Country
Description	ADDescription	Description
DisplayName	ADFullName	FullName
Email	ADEMail²	Email
Initials	ADInitials	Initials
OrgUnit	ADDepartment	Department
Title	ADPersonalTitle	Title
Worklist (To Do list)	ADAccountName	AccountName
	ADCity	City
	ADCompany	Company
	ADCountry	Country
	ADDisplayName	DisplayName
	ADJobTitle	JobTitle
	ADNT4Name	NetBIOSName
	ADPostalCode	PostalCode
	ADPostOfficeBox	PostOfficeBox
	ADState	State
	ADStreetAddress	StreetAddress

Notes

Values are the concatenation of the other address aliases (ADStreetAddress + ADPostOfficeBox + ADCity + ADState + ADPostalCode + ADCountry).
Values use the format <UserName>@<Domain>. If mapped to Worklist (Worklist=ADEmail in ADSyncUsersConfig.ini), only <UserName> is used.

To edit the user group mapping:

Open ADSyncUsersConfig.ini in any text editor. It is located in the same folder as the program.
Find or create the GroupMapping section in the file.
Add or modify the lines after the section heading to specify an Active Directory group name on the left side of the line and its corresponding Meridian group name on the right side of the line similar to the following example.
Save your changes and close the file.

[GroupMapping]
Domain Admins=BCGroupAdmins
Domain Users=MeridianUsers

Related concepts

Understanding the command line parameters