Documentation

Active Directory field mappings

Active Directory field mappings

ThoughtFarmer user profile fields can be mapped to Active Directory account attributes. Depending on the settings you choose, this means that when information changes in one of the Active Directory or a ThoughtFarmer profile, it is automatically updated in the other.

Each profile is matched to a person's name, so the minimum requirement for Active Directory integration is to map the First name and Last name ThoughtFarmer fields (givenName and sn in Active Directory).

ThoughtFarmer can also sync any custom profile field with any Active Directory user attribute. Once you have created the custom field in ThoughtFarmer it will be available in the dropdown when creating a new field mapping in Active Directory.

Go to:

 

Choosing the data owner for a mapped field

The data owner can be set to either ThoughtFarmer or AD on a field by field basis. For ThoughtFarmer to be the data owner of any fields, AD write access needs to be enabled on the specific Active Directory page, and the AD service account needs write permissions to AD user attributes. If ThoughtFarmer is the owner of a mapped field then any changes made on a user's profile will overwrite that value in AD when the profile changes are saved.

With AD as the data owner, any changes users make to their profile fields within ThoughtFarmer are overwritten by the AD values whenever the synchronization task Refresh mapped user fields where the data owner is AD occurs. Because of this you may wish to make fields with AD as the data owner non-editable by users.

The default field mappings and data owner settings are shown at the bottom of the page.

Create a new field mapping

  1. Go to the ThoughtFarmer Administration Panel: Users & security section > Employee directory connector page.
  2. Click on the Active Directory name for which you want to create a new field mapping.
  3. In the Active Directory field mappings section click change at the bottom.
  4. Select the ThoughtFarmer field from the dropdown.
    6.7Admin8684NewFieldMapping.png
  5. Enter the case sensitive AD attribute in the Active Directory field.
  6. Select ThoughtFarmer or AD as the Data owner in the dropdown.
  7. Click Add.

Note: The "Active Directory field" column is free-text and case sensitive. If you are unsure of the exact attribute name in AD you can use AD Explorer to get the specific Active Directory user attributes available on your system.

 

Edit an existing field mapping

  1. Go to the ThoughtFarmer Administration Panel: Users & security section > Employee directory connector page.
  2. Click on the Active Directory name for which you want to edit a field mapping.
  3. In the Active Directory field mappings section click change at the bottom.
  4. Click the gear icon in the Action column on the right of the field you wish to update, and select Edit from the menu that opens.
    6.7Admin8684EditFieldMapping.png
  5. Change the desired values for the provided fields.
  6. Click Save.

 

Delete an existing field mapping

  1. Go to the ThoughtFarmer Administration Panel: Users & security section > Employee directory connector page.
  2. Click on the Active Directory name for which you want to delete a field mapping.
  3. In the Active Directory field mappings section click change at the bottom.
  4. Click the checkbox beside each of the field mappings you wish to delete.
    6.7Admin8684DeleteFieldMapping.png
  5. Click Delete checked at the top.

 

Default ThoughtFarmer fields to Active Directory attributes

The following is a list that shows the default ThoughtFarmer profile fields and their usual mapping to Active Directory user attributes. This is just a guide. Fields can be mapped to any AD attribute you wish.
ThoughtFarmer field Active Directory attribute
First name givenName
Last name sn
Email mail
Title title
Telephone telephoneNumber
Mobile mobile
Fax facsimileTelephoneNumber
UserAddressLine1 streetAddress
UserAddressLine2 l
UserAddressLine3 st
UserAddressLine4 postalCode
Image thumbnailPhoto