Introduction

 

Kentico Active Directory Import Utility is a standalone Windows application which allows importing of users and groups (roles) from Active Directory (AD) into Kentico CMS and assigning users to roles depending on AD settings. The application also provides the possibility of updating already imported users and roles so that their properties are the same as in the current AD.

 

What can it do?

 

•Import users from AD into Kentico CMS.

•Import roles (groups) from AD into Kentico CMS.

•Assign users to appropriate roles based on AD settings.

•Update already imported users and roles according to current AD.

 

What can’t it do?

 

•Import from multiple ADs or domains at once.

•Import the tree structure of roles, since Kentico CMS does not support hierarchical roles.

•Since there is no hierarchy in the CMS roles, import cannot keep the tree structure of AD groups.

 

Terminology

 

•Import profile – XML file with import settings; this file can be created using the wizard mode, or even written manually; it is necessary to have an import profile prepared when you want to use the console mode of the tool

•SAM Account Name - logon name used to support clients and servers on older versions of the operating system, such as Windows NT 4.0, Windows 95, Windows 98, and LAN Manager.

•UPN (User Principal Name) - Internet-style login name for a user. It is based on the RFC 822 standard. The UPN is shorter than the distinguished name and easier to remember. By convention, the name should map to the user‘s e-mail name. The value set for this attribute is equal to the length of the user's ID and the domain name. (Sample UPN: username@subdomain.domain.tld)

•Role or Group - these two terms have an almost identical meaning, while "group" is used in AD terminology and "role" in Kentico CMS

 

Requirements

 

•Kentico CMS 5.0 or higher

•Ultimate edition or any edition with the Advanced package

 

Launching the utility

 

There are two ways how the utility can be launched. You will typically use the AD import wizard, which is described in the Using the wizard chapter. If you want to schedule AD import to be performed on a regular basis, you may utilize the second option - launching AD import from the command line. This approach is described in the AD import from command line chapter.