Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Active Directory is a directory service that Microsoft developed for Windows domain networks.

Connect Active Directory with Devo SOAR

  1. Navigate to Automations > Integrations.

  2. Search for Active Directory.

  3. Click Details, then the + icon. Enter the required information in the following fields.

  4. Label: Enter a connection name.

  5. Reference Values: Define variables here to templatize integration connections and actions. For example, you can use https://www.{{hostname}}.com where, hostname is a variable defined in this input. For more information on how to add data, see 'Add Data' Input Type for Integrations.

  6. Verify SSL: Select option to verify connecting server's SSL certificate (Default is Verify SSL Certificate).

  7. Remote Agent: Run this integration using the Devo SOAR Remote Agent.

  8. Host: The host of the Active Directory. Append port (example: x.x.x.x:636) for custom port configuration. By default, LDAP uses port 389. LDAP SSL uses port 636.

  9. Base DN: Base DN (for example 'dc=logichub,dc=com').

  10. NTLM (Optional): Authenticate using NTLM (New Technology LAN Manager).

  11. Allow Unsecure Connection (Optional): Allow unsecure connection to AD host over SSL.

  12. Username: The username used to connect to the host.

  13. Password: The password used to connect to the host.'

  14. CA Certificate: Upload a .crt CA Certificate file.

  15. After you've entered all the details, click Connect.

Actions for Active Directory

Find Organizational Unit

Find the Organizational Unit of a user.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Input Name

Description

Required

Email

Email of the user whose organizational unit is to be found.

Required

Output

A JSON object containing details of the organizational unit of the user with the specified email.

...

Code Block
## List Members of an Organizational Unit

List all the members of an organizational unit.

### Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

| Input Name | Description                                     | Required |
| :--------- | :---------------------------------------------- | :------- |
| OU String  | Organizational Unit string to list its members. | Required |

### Output

A JSON object containing all members of this OU.

![](https://files.readme.io/494779d-screenshot-1_1 "screenshot-1 (1)")


``` {json}{
   "reason": {
      "dn": "",
      "referrals": null,
      "description": "noSuchObject",
      "result": 32,
      "message": "0000208D: NameErr: DSID-03100213, problem 2001 (NO_OBJECT), data 0, best match of:\n\t''\n\u0000",
      "type": "searchResDone"
   },
   "has_error": true,
   "error": "Some error occurred. Exception(\"Query '(&(objectClass=User)(objectCategory=person))' for '' base_dn failed!\",)"
}

LDAP Search

Searches members in Active Directory of an organization.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

...

Info

Microsoft Active Directory set a hard limit of 1000 entries returned by any search. Therefore, a paginated search is performed by the integration automatically to return Size Limit results (all results if specified 0 or unspecified).
The Time Limit is respected per search of this paginated search.

Output

A JSON object containing multiple rows of results:

  • has_error: true/false

  • error: msg/null

  • other fields of the queried response object

...

Disable User Account

Disables account of a user.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Input Name

Description

Required

Identity Column

Identity of user. Supported identities (DistinguishedName, sAMAccountName).

Required

Identity Type

Type of identity supplied above (DistinguishedName, sAMAccountName).

Required

Output

A JSON object containing multiple rows of result:

...

Enable User Account

Enables the account of a user.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Input Name

Description

Required

Identity Column

Identity of user. Supported identities (DistinguishedName, sAMAccountName).

Required

Identity Type

Type of identity supplied above (DistinguishedName, sAMAccountName).

Required

Output

A JSON object containing multiple rows of result:

...

Reset Password

Reset the user's password.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Input Name

Description

Required

Identity Column

Identity of the user. Supported identities (DistinguishedName, sAMAccountName).

Required

Identity Type

Type of identity supplied above (DistinguishedName, sAMAccountName).

Required

New Password

The new password to replace the old one. A random password will be used if this input-field is not filled.

Optional

Output

A JSON object containing multiple rows of result:

...

Delete User Account

Delete the account of a user.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Input Name

Description

Required

Identity Column

Identity of user. Supported identities (DistinguishedName, sAMAccountName).

Required

Identity Type

Type of identity supplied above (DistinguishedName, sAMAccountName).

Required

Output

A JSON object containing multiple rows of result:

...

Release Notes

  • v2.0.0 - Updated architecture to support IO via filesystem

  • v1.1.0 - Added optional field to upload CA Certificate at connection level.

...