LDAP Groups Synchronization
The LDAP Groups Synchronization extension retrieves users and groups attributes from the organization’s Active Directory
Active Directory synchronization encompasses multiple advantages for all role players in the organization:
- Enforce license compliance
- Analyze usage trends according to Organizational units (OUs), Groups, Departments etc.
- Automate license allocation and maintain restrictions through Flexnet Options files. For more information on the Options files management extension – please refer to this document.
- Cost allocation per specific groups (Projects, Departments, Cost centers etc.)
- Licensing bottlenecks, Required purchase and licenses that should be discontinued.
- Projects’ progress overview
- See who’s got the licenses they need. Easily locate and address such users. See more on the end-user’s interface here.
Active directory information can be extracted from multiple domains. This accommodates companies that operate on different geographic locations, over multiple time zones and several network domains. This is depicted in the image below
As usage restrictions may be imposed on host names as well as on user names, OpenLM enables computer name synchronization, to extract all hostnames within the predefined synchronization start node. This list of hostnames may be used in an Options file in order to reserve licenses for specific workstations or exclude certain computers from checking out licenses
It is possible to generate and synchronize groups in OpenLM based on identical LDAP attribute content. For example, all users with the location attribute “Berlin” will be assigned membership of the group “Berlin” in the OpenLM database.
Active Directory attributes such as Groups, Departments or Companies will form Groups in the OpenLM Database. It is possible to combine different synchronization schemes in order to obtain all different aspects of license usage in the organization
The LDAP synchronization form has efficient browsing capabilities. The user can
- Browse through the source LDAP structure,
- Search for a specific node,
- Select the LDAP synchronization start node and
- Set the appropriate depth of the hierarchical synchronization process.
The synchronized image of the Active Directory information may be presented hierarchically, maintaining the same structure as in the organizational Active Directory, or as a flat list of groups
For more information please refer to these documents: