You import employees from an LDAP server automatically in the menu Other → Import and export → Employees → Import from LDAP. In “LDAP server setup” you enter:
- “Server” - the address of the LDAP server; you can also include the protocol "ldap://" or "ldaps://" in it (a domain controller in a Windows network supports the LDAP protocol, so in Windows networks this will usually be the address of the domain controller)
- “Port” - the number of the port on which the LDAP server runs
- “Username” - the name of a user who can log in to the LDAP server (and has permission to read the list of users)
- “Password” - the password of the user from the previous item
- “DN” - DN (Distinguished Name) is the path to the LDAP records that ReFIS imports
- “Filter” - a filter according to RFC4515 , Netscape Directory SDK
- “Prepend name” - some LDAP servers require the domain before the user name, e.g. "domain\" (empty by default)
- “Append name” - some LDAP servers require the domain after the user name, e.g. "@domain.com" (empty by default)
- “Attribute for user name” - the attribute ReFIS uses as the user name (by default "samaccountname")
- “Verify LDAP login” - if checked, the import offers the option “Set imported users to authenticate login via LDAP” and the imported users then have “Verify password via LDAP at login” switched on.
The LDAP import itself has 2 steps:
- Step 1: you choose the positions in which ReFIS places the imported employees (you do not have to choose any, but usually all employees are placed in some basic position, for example “Document approver”)
- Step 2: you choose the users that ReFIS imports. You can also check all records.