Active Directory

Location in GUI: Administration » Identity Management » External Identity Sources » Active Directory

Diagram

Classes

identity_management (ise)

Name	Type	Constraint	Mandatory	Default Value
active_directories	List	`[active_directories]`	No

active_directories (ise.identity_management)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: `^[\w\d_\-\.]+$`	Yes
description	String		No
domain	String		Yes
ad_scopes_names	String		No	`Default_Scope`
ad_username	String		Yes
ad_password	String		Yes
enable_domain_allowed_list	Boolean	`true`, `false`	No	`true`
groups	List	String	No
attributes	List	`[attributes]`	No
rewrite_rules	List	`[rewrite_rules]`	No
enable_rewrites	Boolean	`true`, `false`	No	`false`
enable_pass_change	Boolean	`true`, `false`	No	`true`
enable_machine_auth	Boolean	`true`, `false`	No	`true`
enable_machine_access	Boolean	`true`, `false`	No	`true`
enable_dialin_permission_check	Boolean	`true`, `false`	No	`false`
plaintext_auth	Boolean	`true`, `false`	No	`false`
aging_time	Integer	min: `1`, max: `8760`	No	`5`
enable_callback_for_dialin_client	Boolean	`true`, `false`	No	`false`
identity_not_in_ad_behaviour	Choice	`REJECT`, `SEARCH_JOINED_FOREST`, `SEARCH_ALL`	No
unreachable_domains_behaviour	Choice	`PROCEED`, `DROP`	No
schema	Choice	`ACTIVE_DIRECTORY`, `CUSTOM`	No
first_name	String		No
department	String		No
last_name	String		No
organizational_unit	String		No
job_title	String		No
locality	String		No
email	String		No
state_or_province	String		No
telephone	String		No
country	String		No
street_address	String		No
enable_failed_auth_protection	Boolean	`true`, `false`	No	`false`
failed_auth_threshold	Integer	min: `1`	No	`5`
auth_protection_type	Choice	`WIRELESS`, `WIRED`, `BOTH`	No

attributes (ise.identity_management.active_directories)

Name	Type	Constraint	Mandatory
name	String	Regex: `^[\w\d_\-\.]+$`	Yes
type	Choice	`STRING`, `IP`, `BOOLEAN`, `INT`, `OCTET_STRING`	Yes
internal_name	String		Yes
default_value	String		Yes

rewrite_rules (ise.identity_management.active_directories)

Name	Type	Mandatory
row_id	String	Yes
rewrite_match	String	Yes
rewrite_result	String	Yes

Examples

ise:
  identity_management:
    active_directories:
      - name: AD
        description: My AD join point
        domain: dcloud.cisco.com
        ad_scopes_names: Default_Scope
        ad_username: administrator
        ad_password: C1sco12345
        groups:
          - dcloud.cisco.com/Builtin/Users
          - dcloud.cisco.com/Builtin/HELPDESK