BlueCielo Meridian Enterprise 2018 Administrator's Guide
Mapping the user properties and groups
By default, ADSyncUsers.exe uses a default mapping of Active Directory user properties to Meridian user properties. You can map the Meridian properties to different Active Directory properties by specifying the property mappings in the ADSyncUsersConfig.ini file. No default group mappings are provided and you must specify those in the file.
To edit the user property mapping:
- Open ADSyncUsersConfig.ini in any text editor. It is located in the same folder as the program.
- Find or create the FieldMapping section in the file. The section heading is followed by lines that each specify a Meridian user property name and its corresponding Active Directory property alias.
- Change the Meridian property name on the left side of the line or change the Active Directory property alias on the right side of the line.
- Save your changes and close the file.
If a Meridian property is not specified in a mapping or the name is specified incorrectly, the property will not be synchronized. If an Active Directory property alias is specified incorrectly, the default mapping will be used.
Not all of the Active Directory properties are available to be mapped. The Active Directory properties that are available to be specified in the mapping and the default mappings are listed in the following table.
Meridian user account property |
Active Directory alias |
Active Directory user object property |
---|---|---|
Account |
ADPrincipalName |
PrincipalName |
Address1 |
ADComputedAddress |
StreetAddress
|
Description |
ADDescription |
Description |
DisplayName |
ADFullName |
FullName |
|
ADEMail2 |
|
Initials |
ADInitials |
Initials |
OrgUnit |
ADDepartment |
Department |
Title |
ADPersonalTitle |
Title |
Worklist (To Do list) |
ADAccountName |
AccountName |
ADCity |
City |
|
ADCompany |
Company |
|
ADCountry |
Country |
|
ADDisplayName |
DisplayName |
|
ADJobTitle |
JobTitle |
|
ADNT4Name |
NetBIOSName |
|
ADPostalCode |
PostalCode |
|
ADPostOfficeBox |
PostOfficeBox |
|
ADState |
State |
|
ADStreetAddress |
StreetAddress |
- Values are the concatenation of the other address aliases (ADStreetAddress + ADPostOfficeBox + ADCity + ADState + ADPostalCode + ADCountry).
- Values use the format <UserName>@<Domain>. If mapped to Worklist (Worklist=ADEmail in ADSyncUsersConfig.ini), only <UserName> is used.
To edit the user group mapping:
- Open ADSyncUsersConfig.ini in any text editor. It is located in the same folder as the program.
- Find or create the GroupMapping section in the file.
- Add or modify the lines after the section heading to specify an Active Directory group name on the left side of the line and its corresponding Meridian group name on the right side of the line similar to the following example.
- Save your changes and close the file.
[GroupMapping] Domain Admins=BCGroupAdmins Domain Users=MeridianUsers