Skip to content

Integrating SailPoint with Novell eDirectory

This document is designed to give specific information about the requirements and field definitions needed to get a working instance of a Novell eDirectory connector in SailPoint.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

Supported Features

The Novell eDirectory connector supports the following features:

Note

Before you can use any item above marked with an asterisk (*), SailPoint must activate the feature for your site. For more information on features, refer to Source Features.

  • Load Novell eDirectory accounts
  • *Provision Novell eDirectory accounts
  • *Access Certifications (certification of entitlements connected to accounts)
  • *Password management
  • Delete Accounts
  • Account Move and Rename

  • Unlock Account: Add the UNLOCK attribute to the source XML file. Add the appropriate values for the lock/unlock attributes:

    • Lock Feature

      <entry key="lockAttr" value="Depend on LDAP type OR any custom attributes set in customer environment for lock"/>

    • Unlock Feature

      <entry key="unlockAttr" value="Depend on LDAP type OR any custom attributes set in customer environment for unlock"/>

  • To add user-friendly definitions for entitlements on direct connect sources, refer to Managing Entitlements in Identity Security Cloud.

  • This source supports scheduling regular aggregations, refer to Scheduling Aggregations for Direct Connect Sources.

Password Management

If Password Management is enabled for your organization, you can change the password for a user of the source. After enabling password management on the source, be aware of the following:

  • The password policy defined in SailPoint applies to accounts on this source.
  • If you change the password for an application connected to this source, the change will automatically be made to the source itself.

For more information on configuring password management, refer to Password Management Overview.

Supported Managed Systems

The Novell eDirectory connector supports the following managed systems:

  • Novell eDirectory (NetIQ) version 9.2, 9.1, and 9.0

Prerequisites

  • Configure at least one virtual appliance cluster and successfully test the connection. For more information, refer to the Virtual Appliance Reference Guide.
  • Create a service account on Novell eDirectory with the required permissions.
  • Universal Password must be configured.
  • Enable Universal Password in Password Policy.
  • The Allow users to initiate password change option must be selected.
  • The Do not expire the user's password when the administrator sets the password option must not be selected.
  • Grace logins can be applied according to password policy added to the application schema.

Required Permissions

The administrator account acting as the service account for the source must have read/write privileges over the directory information tree to manage the LDAP data.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.