You can add an endpoint and configure the Active Directory plug-in to connect to a running Active Directory instance and manage users and user groups, Active Directory computers, organizational units, and so on.
About this task
By using the Microsoft Active Directory plug-in, you can orchestrate only one connection to an Active Directory host. You cannot add multiple Microsoft Active Directory instances as endpoints. You cannot delete an Active Directory endpoint. After you add an Active Directory endpoint, you can update it at any time.
Verify that you have access to a Microsoft Active Directory instance. See the Microsoft Active Directory documentation.
Log in to the vRealize Automation console as a tenant administrator.
- Select .
- Click the New icon ().
- Select Active Directory from the Plug-in drop-down menu.
- Click Next.
- Enter a name and, optionally, a description.
- Click Next.
- Configure the Active Directory server details.
- Enter the IP address or the DNS name of the host on which Active Directory runs in the Active Directory host IP/URL text box.
- Enter the lookup port of your Active Directory server in the Port text box.
vRealize Orchestrator supports the Active Directory hierarchical domains structure. If your domain controller is configured to use Global Catalog, you must use port 3268. You cannot use the default port 389 to connect to the Global Catalog server.
- Enter the root element of the Active Directory service in the Root text box.
For example, if your domain name is mycompany.com, then your root Active Directory is dc=mycompany,dc=com.
This node is used for browsing your service directory after entering the appropriate credentials. For large service directories, specifying a node in the tree narrows the search and improves performance. For example, rather than searching in the entire directory, you can specify ou=employees,dc=mycompany,dc=com. This root element displays all the users in the Employees group.
- (Optional) To activate encrypted certification for the connection between vRealize Orchestrator and Active Directory, select Yes from the Use SSL drop-down menu.
The SSL certificate is automatically imported without prompting for confirmation even if the certificate is self-signed.
- (Optional) Enter the default domain in the Default Domain text box.
For example, if your domain name is mycompany.com, type @mycompany.com.
- Configure the shared session settings.
- Enter the user name for the shared session in the User name for the shared session text box.
- Enter the password for the shared session in the Password for the shared session text box.
- Click Finish.
You added an Active Directory instance as an endpoint. XaaS architects can use XaaS to publish Active Directory plug-in workflows as catalog items and resource actions.