User Mapping Wizard Field Information
The User Mapping Wizard is used in all directory services to map the CSM User Business Object and user information to the directory service object that represents users. LDAP is used in this example, but the information is the same for any type of directory service.
To open the User Mapping Wizard, log in to CSM Administrator, navigate to Create a New Blueprint > Tools > Directory Services, and edit the desired service. Select Users in the left navigation pane, and then select the Wizard button.
The Wizard automatically maps CSM fields to directory service fields. The Wizard also creates some common fields. Since fields in the directory service standard are sometimes cryptic, CSM assigns more obvious names to them. For example, the co field in LDAP holds the name of the country, so CSM calls its field Country.
The Map LDAP Object page is where objects are selected to map to each other. Select the Add button to see all of the directory service fields that were not mapped and add any additional fields. There no maximum number of fields allowed. Select the Delete button to remove any fields that are not necessary.
Be sure to map the field that holds the user ID of each LDAP user. This field is needed to synchronize when a re-import is done for users.
- Cherwell Service Management Business Object: Shows the name of the CSM User Business Object that holds the LDAP data.
- LDAP object: The name of the LDAP object that is mapped to a CSM Business Object.
Active Directory uses the User object to hold user information. The LDAP standard uses INetOrgPerson to hold user information. Each vendor may have its own name that it uses for the INetOrgPerson object.
- Additional Filters on User: The filter limits the search results to the specified path and filters. For example, set filters to show only active users, only users with an email attribute, and more. To set up additional filters, select the Add button. The Add Filter window opens.
The Filter window offers three types of filters:
- Filter for attribute that equals a certain value: Filters on an attribute that has a particular value.
- Enter a custom filter string: Filter LDAP directly. For example: (&(objectClass=user)(objectCategory=person)(!userAccountControl:1.2.840.1135188.8.131.523:=2))
- Special Filters: Choose special filters that CSM provides for certain objects.