Start with: Common LDAP pattern
First six fields can show one at a time when the previous is filled in
- LDAP external system ID (required)
- LDAP pattern: drop down with options below (show after external system selected)
- activeDirectoryGroups
- make sure the external system is marked as active directory
- init start with membership structure to groupAttributes
- init start with group object class to: top,group
- init start with group membership attribute to: member
- init start with membershipDn to true
- default start with to bushy type group structure
- bushyGroupsWithMembershipDNs
- init start with membership structure to groupAttributes
- init start with group organization to bushy
- init start with membershipDn to true
- bushyGroupsWithMembershipSubjectIds
- init user attribute type: core
- init start with membership structure to groupAttributes
- init start with group organization to bushy
- init start with membershipDn to false
- init start with membershipValue to subjectId
- flatGroupsWithMembershipDNs
- init start with membership structure to groupAttributes
- init start with group organization to flat
- init start with membershipDn to true
- flatGroupsWithMembershipSubjectIds
- init user attribute type: core
- init start with membership structure to groupAttributes
- init start with group organization to flat
- init start with membershipDn to false
- init start with membershipValue to subjectId
- groupOfNames
- init start with membership structure to groupAttributes
- init start with group object class to: top,groupOfNames
- init start with group membership attribute to: member
- init start with membershipDn to true
- other
- proceed with screen
- posixGroupsWithMembershipDNs
- init start with membership structure to groupAttributes
- init start with group object class to: top,posixGroup
- init start with group membership attribute to: member
- init start with membershipDn to true
- init start with idIndex attribute to gidNumber
- posixGroupsWithMembershipSubjectIds
- init start with membership structure to groupAttributes
- init start with group object class to: top,posixGroup
- init start with group membership attribute to: memberUid
- init start with idIndex attribute to gidNumber
- init start with membershipValue to subjectId
- usersWithEduPersonAffiliations
- init start with membership structure to entityAttributes
- init start with membershipDn to false
- init start with membership attribute name to eduPersonAffiliation
- init start with membershipValue to extension
- usersWithEduPersonEntitlements
- init start with membership structure to entityAttributes
- init start with membershipDn to false
- init start with membership attribute name to eduPersonEntitlement
- init start with membershipValue to name
- usersWithMembershipGroupExtensions
- init start with membership structure to entityAttributes
- init start with membershipDn to false
- init start with membershipValue to extension
- usersWithMembershipGroupNames
- init start with membership structure to entityAttributes
- init start with membershipDn to false
- init start with membershipValue to name
- activeDirectoryGroups
- User attributes type: drop down with options, required (show after ldap pattern)
- Only uses built in core attributes e.g. subjectId, subjectIdentifier0-2, email, name, description or translations of those (value: core)
- Needs other subject source attributes (value: subjectSource)
- Needs a SQL or LDAP filter, but not other subject attributes. If LDAP this is a different LDAP than the LDAP provisioning to (value: entityResolver)
- Needs subject source source attributes and SQL or LDAP filter. If LDAP this is a different LDAP than the LDAP provisioning to (value: subjectSourceAndEntityResolver)
- Membership structure (required no default, show when user attributes type filled in), groupAttributes or entityAttributes
- membershipValue is DN? (true/false, required, no default, show after membership structure selected) (show rest of form after this filled in)
- Group organization: bushy or flat (drop down required no default) (if groupAttributes membershipStructure) (show after membershipValueDn selected)
- if (user attribute type is subjectSource or subjectSourceAndEntityResolver)
- list those attributes and validate against subject source (textfield, comma separated attributes, required)
- if (not groupAttributes and not membershipValueDN), ask if need group link for another reason (boolean default false)
- if (groupLink or groupAttributes or membershipValueDN): LDAP group info
- group base OU, and validate against LDAP (required textfield)
- what attribute is RDN for groups? (add to attribute list if not in there) (required textfield)
- what is RDN value for groups? drop down required: extension, extensionUnderscoreIdIndex, idIndex, name, nameBackwardsUnderscoreMax64, other, script, uuid
- (if groupAttributes) membership attribute name
- (if not membershipValueDN): membership value (drop down required) (other, script, subjectId, subjectIdentifier0, subjectIdentifier1, subjectIdentifier2)
- idIndex attribute: (optional textfield, add to attribute list if not in there)
- matching search attribute different than RDN or idIndex? boolean default false
- if (matching search attribute different than RDN or idIndex) matching search attribute name (textfield required)
- if (matching search attribute different than RDN or idIndex) matching search attribute value (dropdown required: extension, idIndex, name, other, script, uuid)
- object classes for groups (optional textfield, comma separated)
- list other group ldap attributes (not configured yet): (optional textfield comma separated)
- ask if allow group DN override (boolean default false)
- if (not entityAttributes and not membershipValueDN), ask if need entity link for another reason (boolean default false)
- if membershipValueDN or entityLink or entityAttributes: LDAP entity info
- entity base OU, and validate against LDAP (required textfield)
- change entities in LDAP (besides entity attribute if doing entity attributes)? (boolean default false)
- (if change entities) RDN attribute for entities (required textfield)
- (if change entities) RDN value for entities (drop down required) (other, script, subjectId, subjectIdentifier0, subjectIdentifier1, subjectIdentifier2)
- (if entityAttributes) membership attribute name
- (if not membershipValueDN): membership value (drop down required) (dropdown required: extension, idIndex, name, other, script, uuid)
- (if change entities) matching search attribute different than RDN? boolean default false
- (if not change entities or matching search attribute different than RDN) matching/search attribute name (required textfield)
- (if not change entities or matching search attribute different than RDN) matching/search attribute value (drop down required) (other, script, subjectId, subjectIdentifier0, subjectIdentifier1, subjectIdentifier2)
- object classes for entities (optional textfield, comma separated)
- list other entity ldap attributes (not configured yet): (optional textfield)
- if entityAttributes and not membershipValueDN, ask if allow membership value override (boolean default false)
- add disabled full sync daemon? boolean default to true
- add disabled incremental sync daemon? boolean default to true