Setting up and running user synchronization
This tutorial is intended for professionals with prior knowledge in the area and administrator access to the server that has the directory service running, as well as the SoftExpert Suite Configuration and Administration components.
We recommend you carry out a planning step before starting the implementation of the SoftExpert Suite integration with a directory service. This will allow you to find the best configuration for the organization's structure, considering the variables that change from environment to environment. Although this manual provides guidance for most configuration scenarios, your framework may require a unique configuration to meet your planned requirements. Some important points to consider when planning include:
- Version of the server that has the directory service installed
- Authentication methods and protocol versions to be used
- Communication mode for user synchronization
- Release of ports and services for SoftExpert Suite to access resources
- User directories and filters for synchronization
- Synchronization frequency and how to start the process
- Browsers used on client stations
SoftExpert Suite supports user synchronization with Microsoft's Active Directory service or OpenLDAP, using the LDAP protocol for communication.
There are two ways for the system to communicate with the directory service:
-
Direct communication: If the SoftExpert Suite server is in the same domain as the directory service, or if the service is available externally, communication for user synchronization can be established directly through the LDAP protocol. Otherwise, the SoftExpert Identity option must be used.
-
SoftExpert Identity application: This feature is used when the SoftExpert Suite server does not have direct access to the directory service, which is common in clients hosted on cloud servers. The application acts as an intermediary between the parties, running within the directory service network and transferring users' data to the system.
⚠️ Attention:
- The next sections will present a step-by-step guide on how to configure and execute the user synchronization process, covering both the direct communication mode and the use of SoftExpert Identity. It is important to highlight that it is not possible to use both forms of communication simultaneously; you must choose SoftExpert Identity only if the SoftExpert Suite server does not have direct access to the directory service.