Multiple Active Directories in one service now instance

[ryan_percival]

Hi Guys,

So basically as it says in the title we are going to be using around 18 AD servers to get user records but these are all for the same company so domain separation isn't really an option for us.

The reason we have so many AD servers is that each one is a franchise and we aren't allowed to merge the AD servers with our main one, we basically need some way to be able to import the AD records from the 18 servers into one service now.

We were initially thinking of coalescing on the GUID with it being globally unique but i not sure if this would work as we would potentially still end up with some users having the same login name.

Any suggestions or help is very much appreciated.

Thanks

Ryan

[poyntzj · Accepted solution]

ahh.

I feel the user_name field will come into play I'm afraid.   It is a unique index in Servicenow and when I did look to ask them to remove this and make objectGUID a unqiue index, it ended up with a long discussion with a developer who indicated it had the potential to break quite a lot by making user_name non unique.

After that I went down the prefix route.

[ryan_percival]

Looks like it will have to be the prefix for us too in this instance, Thanks for your help Julian

[ryan_percival]

Hey Julian,

I don't suppose you could point me in the direction of how to prefix the LDAP records before they hit the tables? or prefix the ones we have already imported?

Thanks

Ryan

[poyntzj]

hi Ryan

On the transform map, make the mapping for user_name into a "Use Script"

// Mark external users as being in a special region and alter their user_name slightly

if (source.u_dn.indexOf(',DC=ext,DC=ad,DC=abc,DC=net') != -1) {

   answer = 'EXT\\' + source.u_samaccountname;

} else {

   answer = source.u_samaccountname;

}

change the source.u_dn as needed

[ryan_percival]

Thanks so much Julian, I owe you a drink if you're ever up Newcastle way