Overview for integrating Active Directory

You can configure Windows Active Directory and integrate with Security Center by following a sequence of steps.

Step	Task	Where to find more information
Understanding prerequisites and key issues before integrating
1	Learn about Windows Active Directory	Integration with Windows Active Directory About Active Directory synchronization About universal groups and global catalogs Differences between Active Directory integration and GCM.
2	Ensure you have the proper permissions	For a list of required permissions, see the associated Global catalog attributes
3	Read the most recent Security Center Release Notes to learn about known issues and limitations related to Active Directory.	Known issues in Security Center Limitations in Security Center
Configuring Active Directory
4	Create users in your Active Directory domain. NOTE: You might already have the necessary users in your domain. If this is the case, you can skip this step.	Creating users in Active Directory
5	Use Active Directory attributes to assign credentials to your cardholder users.	Assigning credentials in Active Directory
6	Create security groups for users and cardholders.	Creating security groups in Active Directory
7	Add your users to the necessary security groups.	Adding users to security groups in Active Directory
Integrating Active Directory with Security Center
9	Import the security groups created in step 6.	Importing security groups from an Active Directory
10	Link the Active Directory attributes from step 5 to Security Center fields.	Linking AD attributes to Security Center fields Selecting which credential fields to synchronize with Active Directory
Troubleshooting and Maintenance
11	When a synchronized entity has the same name as a local entity, the Active Directory role sees it as a potential conflict.	Resolving conflicts caused by imported entities
12	If you cannot log on to Security Center using your Windows Active Directory (AD) credentials, there might be an issue with your system setup.	Cannot log on using Active Directory credentials
13	If you have an imported user or cardholder whose access needs to be suspended or terminated, you can deactivate the user.	Deactivating users imported from an Active Directory
14	See related KB articles for more troubleshooting help.	[KBA-79010] Active Directory users deleted after upgrading to Security Center 5.8 (For 5.8 GA) [KBA-01301] Unable to synchronize pictures to and from Active Directory [KBA-00994] Troubleshooting the Active Directory role in Security Center [KBA-78598] Global Cardholder Synchronizer role showing dependency errors for Active Directory cardholders when trying to synchronize (For 5.7 GA)

Overview for integrating Active Directory - Security Center 5.11

Active Directory Integration Guide 5.11