|
|
|
|
Active Directory Integration |
Associating a User's AD Group Information with Ektron CMS400.NET
When Integration is First Enabled
If Auto Add User To Group is checked (on the Active Directory Setup screen), a user's group membership is first copied from the AD to Ektron CMS400.NET or when a user logs in or is added. At this time, any AD group memberships overwrite Ektron CMS400.NET group memberships except the Everyone group, to which all users belong.
Note
The Everyone group, unlike other Ektron CMS400.NET groups, is not associated with an AD group. It is an all-encompassing group with no special permissions.
If a user belongs to an AD user group that does not exist in Ektron CMS400.NET, nothing happens because the feature assumes that all AD groups are not meaningful in Ektron CMS400.NET.
If a user belongs to an Ektron CMS400.NET user group that does not exist in AD, the discrepancy is flagged on the Active Directory Setup and Active Directory Status screens. From these screens, you can copy the AD group information into Ektron CMS400.NET.
See Also: Associating User Group Membership with Active Directory User Group Membership and Associating Groups with Active Directory Groups
To learn how membership is updated from then on, see After Integration is Enabled.
Follow the procedure described in Copying User Groups from AD to Ektron CMS400.NET to copy AD user groups to Ektron CMS400.NET. As users in those groups are added to Ektron CMS400.NET, their group membership is copied from AD to Ektron CMS400.NET.
After Integration is Enabled
A user's group membership is updated in Ektron CMS400.NET when all of the following are true:
- The Enable automatic addition of user to groups field is checked on the Active Directory Setup screen
- A user is added to Ektron CMS400.NET or his group membership changes in the Active Directory
- The user logs in or someone clicks on the Refresh button (
) on the user's View User Information screen
|
|
|
|
|