Skip to main content

How to configure AD mapping from a single AD security group for multiple domain environments

Overview

Importing users into inSync from separate domains does not require creating separate connections to each domain. AD mapping can be configured so that inSync can import users from separate parent and child domains using a single AD security group.
​

To configure this, you will need to complete the following phases:

  1. Configure the inSync Connector and AD security group

  2. Register the AD/LDAP account

  3. Create the AD mapping

Phase 1: Configure the inSync Connector and AD Security Group

  1. Log in to the Druva Cloud Console.

  2. Go to Druva Cloud Settings > Provisioning Methods > AD/LDAP.

  3. Click on Add a New Connector. (Note: Copy the registration key shown on the screen, as it is required to activate the connector post-installation).

Untitled picture.png Machine generated alternative text: Add New Connector o 1. Download and Install connector x select OS Windows - 64bit - ms. 2. Activate using registration key Registration key Windows 64bit - msi version: SHA2Sl_lM: a6d678325c4fb2939cSa9cf79fbd71a07ö09S047cee2560eOfOS3fb7ad04fS62 Download -129 MB Generate key eyJQcm9kdWNOSUQiojQw0Tcs1kN1c3RvbVWySUQiojAs1mUvb2tpZS161i1s11Rva2Vu1joiMzMwZOYwYWFjMTUzMjkSZ011MTZj00BmZGISMzA2 Yn-MLCJUb2t1bklE1j03Mj1xMmiR2xvYmFsQ3VzdG9tZXJJRC161jNhMWMIMWRjLTFiNG1tNGFkMy04NTMOLTlhZTNi0TEyMzAINiJ9 (D Copythe registration key. It is required to activate the connector post-installation. Tip : Only after the connecter is activated, it is listed on the AO Connector listing page. Ink Drawings Ink Drawings Ink Drawings Ink Drawings Ink Drawings Ink Drawings Ink Drawings Ink Drawings Ink Drawings Ink Drawings Ink Drawings

4. Install the inSync AD connector software on a server joined with the parent domain and register it using the registration key.

5. Create a universal security group on the parent domain Active Directory.

6. Import users into this security group from both the parent and child domains.

💡 Tip: Ensure both domains have a 2-way trust established.

Phase 2: Register the AD/LDAP Account

  1. Log in to the Druva Cloud Console.

  2. Go to Druva Cloud Settings > Provisioning Methods > AD/LDAP > Accounts.

  3. Click Register New Account and provide the following details:

    • Host: FQDN/IP address of any domain controller on the parent domain (where the security group exists).

    • Port: 3268 (the port for the global catalog).

4. Open the inSync Connector installed on the server and click Manage AD accounts.


5. Enter the domain account credentials that have access to both the parent and child domains.

Phase 3: Create AD Mapping

  1. On the Users Provisioning page, click New Mapping.

  2. Click the Switch to manual AD/LDAP filters link.

  3. On the Create AD/LDAP Mapping window, enter the following field values and click Next:

    • AD/LDAP mapping name: Name for the AD Mapping.

    • AD/LDAP Server: Select the AD server from the drop-down list.

    • Base DN: The part of the base domain name that is common across the domain names of the users in the AD security group.

    • Name to be used for creation: Username based on the organizational nomenclature.

    • Organizational unit: Keep this field blank.

    • AD Security group: Distinguished name of the AD security group (e.g., CN=Druva_Users,OU=Test OU,DC=forest,DC=com).

    • Department: Optional.

    • Country: Optional.

4. Once the mapping is created, verify the configuration by performing a manual import. Navigate to Users > User Provisioning to test.

Related Articles
Did this answer your question?