Active Directories
Active Directories page is used to integrate MetaDefender Managed File Transfer with your organization Active Directory or LDAP Directory in order to synchronize users.
In order to be able to set up User Directory integration, the account used by Managed File Transfer to connect to Active Directory or LDAP Directory will require read permissions in your organizations User Directory.
Active directory integration process
After clicking the button to add a new User Directory, the user is prompted the next screen which is User Directory Account Settings.
Pre-setup Considerations for Active Directory Integration
Before proceeding with the Active Directory setup, please take into account the information provided below;
In case Single Sign-On is configured and is utilizing the same source as a configured Active Directory a user logging in using Single Sign-On will still have roles assigned based on the Active Directory configuration in the system.
Example: If an email address is not registered as administrator in Single Sign-On configuration but the logging in user's Active Directory group is configured as an administrator group, the logged in user will have administrator privilages.
In case Single Sign-On was configured and utilized prior to configuring an Active Directory which points to the same source of users all Local Users that were created through Single Sign-On must be deleted before they can log in.
The reason behind this is that the same user has been brought into the system through Active Directory and during login the system is unable to disambiguate between the two occurences of the same user.
After deleting the Local User variant, both Single Sign-On and Active Directory login will be directed to the Active Directory managed user.
When a local MetaDefender Managed File Transfer user and an external directory user share the same email address, the login mechanism will first try to match the external directory for the credentials and after that will fall back to authenticate the local user.
Adding two DC (domain controller) servers for the same domain (for redundancy purposes) is not supported yet. We only support multiple DC for different domains.
Follow the Account Settings settings page for information on how to configure the account settings.