Configuration Fields

Connection Credentials

The user account to use when connecting to the server.

The password to use when connecting to the server.

Server Host

The name of the host machine where the ADAM server is running.

The port number the server is listening to.

Account Settings

Select one of the following:

  • Subtree - Select to search the specified Search DN and all containers within it.

  • Base - Select to search only the Search DN.

  • One Level - Select to search the Search DN and the containers one level below it.

Enter the DN to search for the accounts that you want to load.

Specify the DN for determining the group memberships of the users you are loading.

An optional filter that limits the results returned by the Search DN. For example, the following filter returns all entries that do not represent a person:(!(objectclass=person)

An optional filter applied to the results returned by the source. Derived attributes can be included in the filter. For example, the following filter string removes users if there is an attribute named deleted and the value is true:deleted == "true"

Group Settings

Select one of the following:

  • Subtree - Select to search the specified Search DN and all containers within it.

  • Base - Select to search only the Search DN.

  • One Level - Select to search the Search DN and the containers one level below it.

Enter the DN to search for the groups that you want to load.

An optional filter that limits the results returned by the Search DN.

Additional Filter

An optional filter applied to the results returned by the source. Derived attributes can be included in the filter.

Advanced Options

Select this checkbox to see and select options that follow.

Select Enable if the connection is overTLS​.

For more information, refer to TLS Configuration on Virtual Appliances

Delta Aggregation Mode

Select the Enable checkbox to activate delta aggregation

Specify a value in the Deleted Object Container field to grant permission to the specified object as follows:

CN=Deleted Objects, DOMAIN

Where DOMAIN is a place holder for the naming context where the account objects reside. Replace DOMAIN with the corresponding naming context. For example:

CN=Deleted Objects,dc=sailpoint,dc=com

Authorization Type

Select one of the following.

None

Allows you to use a clear text password for the Service Account in the Connection Credentials panel.