Home » forums » Luminis Platform / System

Microsoft Active Directory in addition to Luminis LDAP ?

Submitted by nlee on Thu, 2008-08-28 17:50

Hi All,

We are currently running a Luminis platform where we get our accounts automatically created via Banner. Our windows administrator wants to get in on this act. Is there any way for his Microsoft Active Directory to get passed this same information so that the accounts are created automatically for him as well?

thanks
norman

‹ Google apps directory sync Getting secret store to automatically kick off ›

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

SGHE ADAP service

Submitted by katya on Fri, 2008-09-05 13:10.

Hi Norman -

SGHE does offer an Active Directory Account Provisioning (ADAP) service, where they build/configure a connector against LMG and LMB, so that A.D. can pick up the data associated with the LDI triggers. It's on top of the regular Luminis licensing - contact your SGHE account manager for details.

Alice Kim

Has anyone else gone through the AD process with SunGard?

Submitted by kosovich on Fri, 2008-09-05 15:16.

Can anyone share their experiences with how their integration went with regard to Luminis and Active Directory?

We have Luminis 4.1 and we are looking to use Active Directory as the external authentication for the portal. Our campus is in the process of aligning our user information so Active Directory will be the authoritative source. I am just curious about how others have managed this process by having Luminis portal up and running for a period of time and then working with SunGard on the AD integration.

Thanks.

ADAP and SAF

Submitted by corlan94 on Wed, 2008-12-03 15:09.

We are just in the midst of the implementation and not to happy. (You can see my new blog entry 'ADAP Implementatin'. The adapter as written by SunGard doesn't follow the IMS standard in my view, and thus has very limited functionality. It can toss a lot of stuff (create accounts) in AD, but does very little beyond that to my understanding.

The biggest problem I see is that they don't push the sourcedid.id over, so the only way to identify the AD account in relation to a Banner account is the AD.SAMACCOUNTNAME and the Banner 3rd Party ID [B3PID]. There are occassions where the B3PID may be changed manually (marriage, divorce) and there is potential for the a lot of clean up being needed.

The ADAP also doesn't manage role changes. It will simply add accounts if it can.

In my view not well organized or planned out. We are VERY close to writing our own adapter. The rationale; if we have to write a ton of scripts to cleanup and handle maintenance, then lets just write the adapter properly.

We have written some scripts to do this.

Submitted by chamorga on Wed, 2008-12-03 16:41.

We first create a table in Oracle with the information that we need, then we use a Visual basic script to populate A/D.
We get what we want and the script performs cleanup.
I can pass out a copy of the Oracle table script, but our Network manager controls the Visual Basic script and requires that requests for it go through him.
The Oracle script does the heavy lifting of determining who is a current student/faculy/emp. etc. The visual Basic script just moves the info over to A/D.

ADAP Documentation

Submitted by Keith Chapman on Wed, 2009-01-07 17:10.

We at Durham College are also interested in implementing the Banner-Active Directory ADAP process. Currently we are provisioning new accounts to Active Directory using VB. We would like to remove the VB part and take the Banner Events and have ADAP process them. My Manager was at an SCT conference and was told that ADAP was something that could be implemented for free from SCT. Is this true? If it is correct I would love to know where to get the code and documentation. I have been searching for the last few days for any documentation on this process but have not found anything.

Any information would be helpful.
Thanks in advance

copy of Oracle table script

Submitted by carltond on Thu, 2010-05-06 14:01.

I would really like to get a copy of your Oracle table script. My email address is

don.carlton@citadel.edu

Would like a copy of the code

Submitted by Keith Chapman on Wed, 2009-01-14 15:46.

I would love to get a copy of the Oracle Code. Can you send it to me?
keith.chapman@uoit.ca

I would also like to get a copy of the VB code but if that can't be done then that's ok.

Thanks

Oracle script

Submitted by rvmorgan on Tue, 2009-02-17 13:50.

I would be interested in receiving the oracle script if possible, and the VB script if also possible. Stonehill College is new to Banner/Luminis and we are in the process of debating the AD/Luminis LDAP subject now.

Thanks,

rmorgan@stonehill.edu

Copy of Oracle Script

Submitted by rmarak on Mon, 2009-03-02 19:38.

I would really appreciate the opportunity to take a look at your Oracle table script. My email address is

rmarak@stcl.edu

If you will send the address of your Network Manager I would also like to request a copy of his VB script.

Thanks.

Did you happen to get copies of these?

Submitted by wjmahoney on Mon, 2009-04-27 15:59.

Hi Randy,

Just wondering if you happen to have got a copy of these?

Bill

If you did receive a copy of these?

Submitted by kerseyr on Tue, 2009-10-27 14:48.

If so, may I request a copy?

Very Late Reply

Submitted by rmarak on Thu, 2010-05-06 14:51.

I never received a copy.

MS AD and Sun Ldap

Submitted by Jason on Tue, 2009-03-03 20:04.

I explored the Sun Ldap replication features to try to populate AD.

It seemed to be very feasible, and I made quite a bit of progress (then the project was cancelled for various reasons hehe).

The basic plan was setting up replication between the Luminis Sun Ldap 5.2 and a newly installed Sun Ldap 6.3. This is supported by sun. I was able to set this up without problem.

The next step was to configure the out of the box Ldap 6.3 AD connector. I never got that far though. The Sun AD connector was released with Ldap 6.0, so I assume it is pretty mature given that ldap 6.3 is now out.

Syndicate content