# Integrating SailPoint with Novell eDirectory

This document is designed to give specific information about the requirements and field definitions needed to get a working instance of a Novell eDirectory connector in SailPoint.

> [!NOTE]
>
> To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the [SaaS Release Notes](<https://community.sailpoint.com/release-notes/saas>) page.

## Supported Features

The Novell eDirectory connector supports the following features:

> [!NOTE]
>
> Before you can use any item above marked with an asterisk (\*), SailPoint must activate the feature for your site. For more information on features, refer to [Source Features](<https://community.sailpoint.com/knowledge/Identity-Security-Cloud-Source-Features>).

- Load Novell eDirectory accounts
- \*Provision Novell eDirectory accounts
- \*Access Certifications (certification of entitlements connected to accounts)
- \*Password management
- Delete Accounts
- Account Move and Rename
- Unlock Account: Add the `UNLOCK` attribute to the source XML file. Add the appropriate values for the lock/unlock attributes:

  - **Lock Feature**

    ```text
    <entry key="lockAttr" value="Depend on LDAP type OR any custom attributes set in customer environment for lock"/>
    ```
  - **Unlock Feature**

    ```text
    <entry key="unlockAttr" value="Depend on LDAP type OR any custom attributes set in customer environment for unlock"/>
    ```
- To add user-friendly definitions for entitlements on direct connect sources, refer to [Managing Entitlements in Identity Security Cloud](<https://documentation.sailpoint.com/saas/help/access/entitlements.html>).
- This source supports scheduling regular aggregations, refer to [Scheduling Aggregations for Direct Connect Sources](<https://documentation.sailpoint.com/saas/help/accounts/loading_data.html#scheduling-aggregations-for-direct-connect-sources>).

### Password Management

If Password Management is enabled for your organization, you can change the password for a user of the source. After enabling password management on the source, be aware of the following:

- The password policy defined in SailPoint applies to accounts on this source.
- If you change the password for an application connected to this source, the change will automatically be made to the source itself.

For more information on configuring password management, refer to [Password Management Overview](<https://documentation.sailpoint.com/saas/help/pwd/index.html>).

## Supported Managed Systems

The Novell eDirectory connector supports the following managed systems:

- Novell eDirectory (NetIQ) version 9.2, 9.1, and 9.0

## Prerequisites

- Configure at least one virtual appliance cluster and successfully test the connection. For more information, refer to the [Virtual Appliance Reference Guide](<https://documentation.sailpoint.com/saas/help/va/index.html>).
- Create a service account on Novell eDirectory with the required permissions.
- Universal Password must be configured.
- Enable Universal Password in Password Policy.
- The **Allow users to initiate password** change option must be selected.
- The **Do not expire the user's password when the administrator sets the password** option must not be selected.
- Grace logins can be applied according to password policy added to the application schema.

## Required Permissions

The administrator account acting as the service account for the source must have read/write privileges over the directory information tree to manage the LDAP data.