Overview

Active Directory, or any LDAP authentication source, can act as a source for user accounts within the system. When an authentication source is configured, an imported user can log in to the web portal using the credentials attached to his or her authentication source account.

You can integrate with an authentication source in one of two ways: using the machine method, or using the server method.

• Machine Method—If you use the machine method, you will first need to download onto the server that houses the authentication source. You will then register that desktop client to any user within the system. For instructions on how to install and register , please reference the End User Guide.
• Server Method—Using the server method, you can connect to your authentication source without installing a desktop client on the machine that houses the authentication source. This server must be publicly accessible in order to use this method.

TIP
When registering to a user account on a server, it is recommended that you create a service account. A service account should not be subscribed to team shares, should be set to use fixed space quota of .01GB, and should be configured using a predetermined naming system.

Notes to consider

• If you have already manually created user accounts, and want to convert these existing user accounts to AD user accounts, you must ensure that the email addresses match. If an email address matches, then the system will successfully convert the existing user account to an AD user account, and there will be no need to uninstall and reinstall desktop clients.
• Additionally, when you integrate with Active Directory, desktop clients can be silently pushed, installed, and registered to end users without needing to alert the end user. For more information about silent installations, please reference the How to Silently Install Desktop Clients section of the Guide.
• While x360Sync will successfully integrate with any LDAP authentication source, it will not integrate with non-LDAP sources, such as Azure AD. While Azure AD supports internal LDAP authentication, it does not currently support external LDAP authentication. For more information, please reference this TechNet Blog.

Machine method

To integrate with Active Directory using the machine method:

1. On the server that houses Active Directory, download and install. For instructions on installing, please reference the End User Guide.
2. After you install, register to a user account. For instructions on registering, please reference the End User Guide.
3. While still in the server that houses Active Directory, record the full computer name.
   1. Click the Start menu, right-click Computer, and select Properties. The System window displays.
   2. In the System window, find the informational field titled, Full Computer Name. Record the full name of the computer so that it can be referenced later.
4. When you are finished installing and registering , return to the administrative web portal.
5. While in the appropriate organization, click the Settings tab. The Settings page displays.
6. In the Settings page, click the Authentication tab. The Authentication section displays.
7. In the Authentication section, click the Add Source button to add an authentication source. The page refreshes to display a Configure an Authentication Source section of the page.
8. In the Configure an Authentication Source section of the page, configure your authentication source.
   1. In the Machine drop-down menu, select the name of the machine that houses your Active Directory.
   2. In the Host field, enter the full computer name that you recorded above.
   3. In the Domain field, enter the Active Directory Fully Qualified Domain Name (FQDN) (for example, anchor.com).
   4. In the Login field, enter a username that has administrative access to Active Directory.
   5. In the Password field, enter the corresponding password for the administrative user.
   6. Click the Save button when you are finished. After you have entered information for Active Directory, the page will refresh to show you a listing of all current authentication sources.
9. In the Manage column, click the Import Users button. The page refreshes to show import settings.
10. Configure settings for importing users.
    1. Select the Send Welcome Email checkbox to send a welcome email as soon as users are imported into the system.
    2. Select the Enable WebDAV checkbox to enable WebDAV.
    3. Use the Add to Team Shares box to select the Team Shares to which all user accounts should be added. Alternatively, click the All button to add all user accounts to all Team Shares, or click the None button if you do not want to add user accounts to Team Shares. Please note that you can add user accounts to Team Shares after they have been created.
11. In the Organizational Units box, browse and select the Active Directory users that should be imported; alternatively, select specific organizational units (OUs) to be added to the system.
12. Click the Import Selected Users button to import the users into the system. End users can now log in to the system using their AD email address and password.

Server method

To integrate with Active Directory using the server method:

1. While in the appropriate organization, click the Settings tab. The Settings page displays.
2. In the Settings page, click the Authentication tab. The Authentication section displays.
3. In the Authentication section, click the Add Source button to add an authentication source. The page refreshes to display a Configure an Authentication Source section of the page.
4. In the Configure an Authentication Source section of the page, configure your authentication source.
   1. In the Machine drop-down menu, select Use Server.
   2. In the Host field, enter the internal IP address of the Active Directory server machine if it is on the same network as the x360Sync Server. If the Active Directory server machine is outside of your network, enter the publicly resolvable host name or IP address.
   3. In the Domain field, enter the Active Directory Fully Qualified Domain Name (FQDN) (for example, anchor.com).
   4. In the Login field, enter a username that has administrative access to Active Directory.
   5. In the Password field, enter the corresponding password for the administrative use
   6. Click the Save button when you are finished. After you have entered information for Active Directory, the page will refresh to show you a listing of all current authentication sources.
5. In the Manage column, click the Import Users button. The page refreshes to show import settings.
6. Configure settings for importing users.
   1. Select the Send Welcome Email checkbox to send a welcome email as soon as users are imported into the system.
   2. Select the Enable WebDAV checkbox to enable WebDAV.
   3. Use the Add to Team Shares box to select the Team Shares to which all user accounts should be added. Alternatively, click the All button to add all user accounts to all Team Shares, or click the None button if you do not want to add user accounts to Team Shares. Please note that you can add user accounts to Team Shares after they have been created.
7. In the Organizational Units box, browse and select the Active Directory users that should be imported; alternatively, select specific organizational units (OUs) to be added to the system.
8. Click the Import Selected Users button to import the users into the system. End users can now log in to the system using their AD email address and password.