Skip to content

Integrating SailPoint with OpenLDAP

Connecting SailPoint to your OpenLDAP allows you to create a direct connect source for OpenLDAP and load that data into your system. To manage that data, either create an identity profile based on the source or verify that the accounts you load are correlated to an existing identity.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

Supported Features

Note

Before you can use any item marked with an asterisk (*), SailPoint must activate the feature for your site.

OpenLDAP source supports the following features:

  • Load OpenLDAP Accounts
  • *Provision OpenLDAP Accounts
  • *Access Certifications (certification of entitlements connected to accounts)
  • Authentication
  • *Password management
  • Delete Accounts
  • Account Move and Rename

For more information on features, refer to Source Features.

Password Management

If Password Management is enabled for your organization, you can change the password for a user of the source. After enabling password management on the source, be aware of the following:

  • The password policy defined in SailPoint applies to accounts on this source.
  • If you change the password for an application connected to this source, the change will automatically be made to the source itself.

For more information on configuring password management, refer to Password Management Overview.

Supported Managed Systems

The OpenLDAP source supports the following managed systems:

  • OpenLDAP 2.6, 2.5, 2.4.39, and 2.4.26

Prerequisites

  • Configure at least one virtual appliance cluster and successfully test the connection. For more information, refer to the Virtual Appliance Reference Guide.
  • Create a service account on OpenLDAP with the required permissions.

Required Permissions

  • The OpenLDAP source requires that the service account must be the administrator account and that the directory server has the administrator credentials.
  • The OpenLDAP source must have read and write permissions over the directory information tree in order to manage the LDAP data.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.