Hi Creatio Team,
We have a creatio instance with around 100 users, who in order to authenticate use the Creatio authentication. This users are set in specific organizational and functional roles, with access rights applied to them.
We will do a sync with Active Directory through LDAP for the same 100 users, so that the users use LDAP authentication to log in to Creatio and not Creatio authentication?
1-Will these cause any duplicates with the existing Contacts ?
2- Should we deactivate the licenses of the existing users before doing the sync with AD ?
Thank you
Like
Hello,
During synchronization with LDAP is checked table SysAdminUnit (table section Users), so when you synchronize the new user will be created.
You can re-bind the contact with an SQL query and then delete the new contact.
The connection to the table of contacts in SysAdminUnit is made by the ContactId column.
Also, by checking the SysAdminUnit table, if the system already has a user bound to a contact, we cannot create another user bound to an occupied contact.
If users were previously synchronized over LDAP and they have an LDAP element, the system should not generate new contacts/users.
More information is available here:
https://academy.creatio.com/docs/user/setup_and_administration/user_and…
Hello
Kalymbet Anastasia,
Please what is your best suggestion on our scenario?
The old users were created manually. We want to import the same users through LDAP. Are the followoing steps a good workaround ?
1- Deactivate liceneses for existing users
4- Proceed to Synchronization with LDAP
2- Delete old contacts
3- Delete old users