LDAP Integration

[SanketKumaS]

How to source the groups and group members from the LDAP server aligning to the users already present on the ServiceNow platform?User records have come into the sys_user from another source by LDAP Integration only. We need to make sure that duplicate members should not be created in the sys_user table.We want that new data should come to sys_user_group for the groups and to sys_user_grmember for the members.

[Ankur Bawiskar]

@SanketKumaS 

group and group membership not coming from same LDAP?

[Tanushree Maiti]

Hi @SanketKumaS 

Use the standard LDAP Integration but with a specific onBefore transform script ,make sure Coalesce  has been properly set . This method ensures that group memberships are created only for users who already exist in your sys_user table, effectively preventing the creation of duplicate or unwanted user records.

Sample onBefore transform script:

var userGr = new GlideRecord('sys_user');
userGr.addQuery('user_name', source.u_sAMAccountName); // Replace by your Ldap fielduserGr.query();if (userGr.next()) {
    var userId = userGr.sys_id;    var groupGr = new GlideRecord('sys_user_group');
    groupGr.addQuery('name', source.u_department); // Replace your LDAP group field here    groupGr.query();
    if (groupGr.next()) {
        var groupId = groupGr.sys_id;
        // Check if the membership already exists to prevent duplicate sys_user_grmember entries
        var memberGr = new GlideRecord('sys_user_grmember');
        memberGr.addQuery('user', userId);
        memberGr.addQuery('group', groupId);
        memberGr.query();        if (!memberGr.hasNext()) {
            memberGr.initialize();
            memberGr.user = userId;
            memberGr.group = groupId;
            memberGr.insert();
        }
    }
}

Refer Servicenow documentation: LDAP transform maps 

LDAP integration creating Duplicate Accounts in User Table