Contact us at 408.675.5020 or

Home Page

Knowledge Base Search     Advanced

Configure and Test a Connection for Active Directory

Article ID: 369
Last updated: 28 Jan, 2018

Identity Maestro server needs, at minimum, a connection to the primary Directory that hosts the user accounts that will use Identity Maestro to manage user identities and group objects in target systems.  Additional connections can be added using the same procedure once the server is licensed.  This article will discuss:

Applies to

  • Identity Maestro 4.0.4+
  • ServiceControl 4.0.3

Getting Started

This step involves using the Identity Maestro Connection Utility to run a "Microsoft Active Directory" wizard to create a Identity Maestro connection to a target Active Directory (AD) domain. This procedure needs to be repeated for each target AD domain that will be managed using Identity Masetro. Connections need to be created for each instance where Identity Maestro has been installed in Step 1 (Identity Maestro Host Server and Identity Maestro Remote Agent Server).

Prior to running the Active Directory connection wizard, ensure that a connection service user account has been created in each target AD domain, that this account uses the same username, e.g. "imconnect" or "servicecontrol", that each account uses the same password and that the password is set to never expire, and that each account has been added to the corresponding "Domain Admins" group  for the corresponding AD domain.  See Prepare Windows Server to Host Identity Maestro for details.

Create the Connection

To create an Active Directory connection:

  1. Locate and launch the Identity Maestro (ServiceControl) Connection Utility.

  2. Under "New Connection..." click on "Microsoft Active Directory".

  3. At the "Welcome" window, Click Next.

  4. At the "Target Information" window, provide the IP address or DNS name of the Domain Controller and ensure that Enable SSL is checked (mandatory). Click Next.

  5. At the "Enter the information to connect to Microsoft Active Directory" window, ensure that you specify the user principal name of the AD connection service user account, e.g. and the password. If the user specified is not a member of the "Domain Admins" group of the target AD domain, then management functions in ServiceControl will encounter permission-based errors.

    Click Next > to continue.

  6. If an IP address was specified for the Host in step 4, you may see a "Conflict Hostname Detected" window:

    This should display the FQDN (fully qualified domain name) of the domain controller which expected.  Select Yes which will change the connection to use the FQDN value.  This is required to obtain a paid or trial license for the Identity Maestro server. 

  7. At the "Detected Available Services" window, click Next.

  8. At the "Microsoft Active Directory Connection Wizard complete" window, click Finish to create the connection.

  9. This will add a Microsoft Active Directory connector in the connections panel.

  10. To edit or test the connection, double click the connection object in the connections pane on the right.

Test the Connection

  1. Double-click the Active Directory connection. Under the "General" tab, confirm that the correct LDAP distinguished name for the Domain Controller is displayed and that the Username shows the LDAP distinguished name for the ServiceControl service account.

  2. You should test the connection to make sure that it is working. Select the "Connection Targets" Panel. Highlight the ldap connection and click the "Test the connection target" link.

    A "Connection Successful" window will open if the connection is working. Click OK to close the window and select Save >> to save the settings and close the "Connection Edit" window.

  3. Click OK and Cancel to close the connection.

This article was:   Helpful | Not helpful Report an issue

Article ID: 369
Last updated: 28 Jan, 2018
Revision: 6
Views: 253
Comments: 0
print  Print email  Email to friend share  Share pool  Add to pool comment  Add comment
Prev     Next
3 - Connections: Create       Configure and Test a Connection to an eDirectory Tree