Adding members to groups via LDAP

othomas1 · ‎09-01-2020

Hello everyone,

Ive spent a good amount of time trying to get users into groups via LDAP. The user import works, the groups import works, but when i try to configure things to get users into the already existing group, nothing works. I saw a post that said you shouldnt map the u_member field, so i left it blank, can anyone lend some wisdom on getting users into groups?

OnAfter script:

//
// After a group has been inserted the line of code below will get
// all the users that belong to the group according to LDAP and
// put the users into this group. This is done by getting
// the value from the u_members field from the source record.
// If you do not want to put the users in the group then you
// can comment out or remove the line below. If you are using
// something other than Active Directory and user membership is
// not indicated via the 'member' attribute then you can add the
// following line to indicate what field should be used. This
// line would be added before the the call to addMembers.
//
ldapUtils.setMemberField('u_member');
//
ldapUtils.addMembers(source, target);

Mike Patel · ‎09-01-2020

1# Remove u_member from field maps

2# OnAfter script only needs be like ldapUtils.addMembers(source, target);

3# OnStart needs to be below

gs.include("LDAPUtils");
var ldapUtils = new LDAPUtils();
ldapUtils.setLog(log);

Make sure you are mapping source field from ldap import to source field on user record (sys_user).

It needs be like

ldap:CN=XXX\, CCCCC,OU=Users,DC=XXXX,DC=com

View solution in original post

Mike Patel · ‎09-02-2020

change mapping from dn field to source field on user import transform map not group import.

Sravani36 · ‎09-12-2022

Hi Mike,

Facing similar issue, I already have the users in ServiceNow and this users are part of many AD groups

So i need to import this AD groups along with the users who are part of this groups instead of adding the users manually in servicenow.

Can you please help me out how to do it.

Mike Patel · ‎09-02-2020

See example screenshots.

othomas1 · ‎09-02-2020

Thanks for that info, so just so im clear,

The u_source field on the group import, should map to the target source field on the sys_user table?

Mike Patel · ‎09-02-2020

No, group import source field should map to group(sys_user_group) source field.

User import source field should map to User (sys_user) source field.

Look at the screenshots I shared in my previous post.