BlueCielo Meridian Enterprise 2018 Administrator's Guide

Mapping the user properties and groups

By default, ADSyncUsers.exe uses a default mapping of Active Directory user properties to Meridian user properties. You can map the Meridian properties to different Active Directory properties by specifying the property mappings in the ADSyncUsersConfig.ini file. No default group mappings are provided and you must specify those in the file.

To edit the user property mapping:

  1. Open ADSyncUsersConfig.ini in any text editor. It is located in the same folder as the program.
  2. Find or create the FieldMapping section in the file. The section heading is followed by lines that each specify a Meridian user property name and its corresponding Active Directory property alias.
  3. Change the Meridian property name on the left side of the line or change the Active Directory property alias on the right side of the line.
  4. Save your changes and close the file.

If a Meridian property is not specified in a mapping or the name is specified incorrectly, the property will not be synchronized. If an Active Directory property alias is specified incorrectly, the default mapping will be used.

Not all of the Active Directory properties are available to be mapped. The Active Directory properties that are available to be specified in the mapping and the default mappings are listed in the following table.

Available Active Directory aliases and corresponding properties

Meridian user account property

Active Directory alias

Active Directory user object property

Account

ADPrincipalName

PrincipalName

Address1

ADComputedAddress

StreetAddress
+ PostOfficeBox
+ City
+ State
+ PostalCode
+ Country

Description

ADDescription

Description

DisplayName

ADFullName

FullName

Email

ADEMail2

Email

Initials

ADInitials

Initials

OrgUnit

ADDepartment

Department

Title

ADPersonalTitle

Title

Worklist (To Do list)

ADAccountName

AccountName

 

ADCity

City

 

ADCompany

Company

 

ADCountry

Country

 

ADDisplayName

DisplayName

 

ADJobTitle

JobTitle

 

ADNT4Name

NetBIOSName

 

ADPostalCode

PostalCode

 

ADPostOfficeBox

PostOfficeBox

 

ADState

State

 

ADStreetAddress

StreetAddress

Note    
  1. Values are the concatenation of the other address aliases (ADStreetAddress + ADPostOfficeBox + ADCity + ADState + ADPostalCode + ADCountry).
  2. Values use the format <UserName>@<Domain>. If mapped to Worklist (Worklist=ADEmail in ADSyncUsersConfig.ini), only <UserName> is used.

To edit the user group mapping:

  1. Open ADSyncUsersConfig.ini in any text editor. It is located in the same folder as the program.
  2. Find or create the GroupMapping section in the file.
  3. Add or modify the lines after the section heading to specify an Active Directory group name on the left side of the line and its corresponding Meridian group name on the right side of the line similar to the following example.
  4. Save your changes and close the file.
[GroupMapping]
Domain Admins=BCGroupAdmins
Domain Users=MeridianUsers