Active Directory

System > Active Directory

Active Directory

The Active directory (AD) feature enables EntraPass to import and synchronize Users from AD with Operators and users in EntraPass. EntraPass uses Lightweight Directory Access Protocol (LDAP) to share information across the network between the EntraPass server and the clients AD. The sync feature eliminates the manual creation and maintenance of AD Users in EntraPass while the AD integration permits Single Sign On (SSO) authentication. This means Operators are authenticated by their Windows credentials and are automatically logged on to EntraPass Workstation using a single click. Users can also be managed through the AD connection simplifying the management of users. Up to ten AD connections are possible at the same time.

NOTE: To run the EntraPass LDAP service you need to install Microsoft's .NET Framework. Install .NET version 4.6.1 on the same machine where SmartLink is installed.

You are required to enter network and AD settings for the server you want to connect with.

1 - Under the System tab, select the Active directory button. The Active directory window appears with the General tab enabled.

2 - Click the New button to create a new Active directory and enter the necessary information in the language section.

NOTE: The Enable active directory service check box is automatically selected.

3 - Enter the IP address or the Domain name for the server that stores the Active directory. The LDAP application uses the dedicated Port 389 for both TCP and UDP transmission.

4 - The Sync interval (hh:mm:ss) field specifies the time interval between the last Sync and the next Sync. Enter the interval time in hours, minutes and seconds.

NOTE: After first installing the LDAP application EntraPass completes a full Sync. However, for a restart, EntraPass completes a partial Sync where SmartLink only updates new or modified entries.

5 - You need to assign a SmartLink to the Active directory because the LDAP application connects to the SmartLink Web service.

NOTE: Several SmartLink connections are possible on the same SmartLink. The maximum number of Active Directories defined in EntraPass is ten.

6 - Under the Active directory settings complete the following fields:

• LDAP Base DN (Operator) : the name used for the starting point for directory server searches for EntraPass Operators, for example EntraPass.

• LDAP Base DN (User) : the name used for the starting point for directory server searches for EntraPass users, for example EntraPassUser.

• LDAP Binding DN: the user name of the AD User Account that you want to connect to the Active directory.

• LDAP Password: the Active directory password for the AD User Account.

• LDAP Password confirmation: confirm the password.

NOTE: If connection is successful then synchronization will occur. You will see LDAP service status at several locations, these are: System / Active directory, Status / Application / SmartLink, Windows system tray / LDAP Service Control, and the SmartLink application window.

7 - Select the IMPORT AD/LDAP button. If the connection is successful the Imported fields box is populated with the number of fields available from the AD server.

NOTE: The Import AD\LDAP button will be greyed out if LDAP Base DN (User) is blank, or AD server IP or Domain name is blank.

8 - For user's the User Mapping tab defines which Active Directory Attributes are mapped to which EntraPass database field. Here you can customize the fields used in the users synchronization. Table 1 below describes which EntraPass database fields can be mapped.

9 - Use the Sync now button to manually start synchronization with the selected Active Directory server.

NOTE: The button is shaded if the Active directory is not connected.

10 - For operators, under the Operator Mapping tab there are thirteen fields that EntraPass can synchronize with. The first nine are mandatory and read-only but the remaining four are optional depending on your requirements. The majority of read-only fields relate to the Active directory password and the various conditions associated with it. The reason for this is EntraPass does not store passwords in its database. Active directory fully controls passwords.

If you select the Use expiry date and the Operator expiry date Active directory controls when the account expires. If you deselect these fields, the EntraPass settings remain operational. Select the Picture field if you want to store images of the operator, EntraPass can import both jpeg and thumbnail photo types. When you select the E-mail field it is possible to import and store either one or many email addresses for an operator.

11 - Please click here for information on the Comment tab.

Table 1 : EntraPass database fields for user mapping. The TBD field can be customized by you.
EntraPass fields	Active Directory fields	Possible AD fields Syntax
Card User Name	Display Name (DisplayName)	(mandatory)
Card Type (integer)	TBD	AD fields drop list returns attributes of types: integer numerical string enumeration
Start Date (date)	TBD	AD fields drop list returns attributes of types: Generalized Time UTC Coded Time
User End Date (shortint)	TBD	AD fields drop list returns attributes of types: integer enumeration boolean
End Date (date)	TBD	AD fields drop list returns attributes of types: Generalized Time UTC Coded Time
Card # 1 - Card Number (char)	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card # 1 - Display Card Number (shortint)	TBD	AD fields drop list returns attributes of types: integer enumeration boolean
Card # 1 - User expiration date (shortint)	TBD	AD fields drop list returns attributes of types: integer enumeration boolean
Card # 1 - Expiration Date and Hour (date)	TBD	AD fields drop list returns attributes of types: Generalized Time UTC Coded Time
Card # 1 - Trace (shortint)	TBD	AD fields drop list returns attributes of types: integer enumeration boolean
Card # 1 - Stolen/lost (shortint)	TBD	AD fields drop list returns attributes of types: integer enumeration boolean
Card # 2 - Card Number (char)	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card # 2 - Display Card Number (shortint)	TBD	AD fields drop list returns attributes of types: integer enumeration boolean
Card # 2 - User expiration date (shortint)	TBD	AD fields drop list returns attributes of types: integer enumeration boolean
Card # 2 - Expiration Date and Hour (date)	TBD	AD fields drop list returns attributes of types: Generalized Time UTC Coded Time
Card # 2 - Trace (shortint)	TBD	AD fields drop list returns attributes of types: integer enumeration boolean
Card # 2 - Stolen/lost (shortint)	TBD	AD fields drop list returns attributes of types: integer enumeration boolean
Card # 3 - Card Number (char)	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card # 3 - Display Card Number (shortint)	TBD	AD fields drop list returns attributes of types: integer enumeration boolean
Card # 3- User expiration date (shortint)	TBD	AD fields drop list returns attributes of types: integer enumeration boolean
Card # 3 - Expiration Date and Hour (date)	TBD	AD fields drop list returns attributes of types: Generalized Time UTC Coded Time
Card # 3 - Trace (shortint)	TBD	AD fields drop list returns attributes of types: integer enumeration boolean
Card # 3 - Stolen/lost (shortint)	TBD	AD fields drop list returns attributes of types: integer enumeration boolean
Card # 4 - Card Number (char)	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card # 4 - Display Card Number (shortint)	TBD	AD fields drop list returns attributes of types: integer enumeration boolean
Card # 4 - User expiration date (shortint)	TBD	AD fields drop list returns attributes of types: integer enumeration boolean
Card # 4 - Expiration Date and Hour(date)	TBD	AD fields drop list returns attributes of types: Generalized Time UTC Coded Time
Card # 4 - Trace (shortint)	TBD	AD fields drop list returns attributes of types: integer enumeration boolean
Card # 4 - Stolen/lost (shortint)	TBD	AD fields drop list returns attributes of types: integer enumeration boolean
Card # 5 - Card Number (char)	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card # 5 - Display Card Number (shortint)	TBD	AD fields drop list returns attributes of types: integer enumeration boolean
Card # 5 - User expiration date (shortint)	TBD	AD fields drop list returns attributes of types: integer enumeration boolean
Card # 5 - Expiration Date and Hour (date)	TBD	AD fields drop list returns attributes of types: Generalized Time UTC Coded Time
Card # 5 - Trace (shortint)	TBD	AD fields drop list returns attributes of types: integer enumeration boolean
Card # 5 - Stolen/lost (shortint)	TBD	AD fields drop list returns attributes of types: integer enumeration boolean
Card Information 1 (up to 10 with EP Corporate)	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 2	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 3	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 4	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 5	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 6	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 7	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 8	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 9	TBD	AD fields drop list returns attributes of types: - print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 10	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 11 (up to 40 with EP Global)	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 12	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 13	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 14	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 15	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 16	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 17	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 18	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 19	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string - unicode string - numerical string - octet string - SID (type received from AD as octet string)
Card Information 20	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 21	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 22	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 23	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 24	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 25	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 26	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 27	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 28	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 29	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 30	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 31	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 32	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 33	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 34	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 35	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 36	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 37	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 38	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 39	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Information 40	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card Filter (Hattrix only) (integer)	TBD	AD fields drop list returns attributes of types: integer numerical string enumeration
Privileged Operation (Global Gateway only) (shortint)	TBD	AD fields drop list returns attributes of types: integer enumeration boolean
Supervisor level (Global/Hattrix only) (shortint)	TBD	AD fields drop list returns attributes of types: integer enumeration boolean
Delete when expired (shortint)	TBD	AD fields drop list returns attributes of types: integer enumeration boolean
Wait for Keypad (shortint)	TBD	AD fields drop list returns attributes of types: integer enumeration boolean
PIN (char)	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Card State (shortint)	TBD	AD fields drop list returns attributes of types: integer enumeration boolean
Disable Passback (shortint)	TBD	AD fields drop list returns attributes of types: integer enumeration
Extended Door Access	TBD	AD fields drop list returns attributes of types: integer enumeration
Allow Multi-Swipe (shortint)	TBD	AD fields drop list returns attributes of types: integer enumeration
Picture (binary)	TBD	AD fields drop list returns attributes of types: replica link (type received from AD as octet string) octet string SID (type received from AD as octet string)
Badge Layout (integer)	TBD	AD fields drop list returns attributes of types: integer numerical string enumeration
Bar Code (shortint)	TBD	AD fields drop list returns attributes of types: integer enumeration
Value (char)	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)
Enable usage restriction (shortint)	TBD	AD fields drop list returns attributes of types: integer enumeration
Maximum card usage (integer)	TBD	AD fields drop list returns attributes of types: integer numerical string enumeration
Manual Operation only (shortint)	TBD	AD fields drop list returns attributes of types: integer enumeration
Card access group (shortint)	TBD	AD fields drop list returns attributes of types: integer enumeration
Comment (char)	TBD	AD fields drop list returns attributes of types: print case string replica link (type received from AD as octet string) case insensitive string case sensitive string unicode string numerical string octet string SID (type received from AD as octet string)