Verint | Telligent Community
Verint | Telligent Community
  • Site
  • User
  • Site
  • Search
  • User
Telligent Community 10.x
  • Verint Community
Telligent Community 10.x
User Documentation How do I control which Active Directory (AD) fields are synchronized and editable on member profiles?
  • Ask the Community
  • User Documentation
  • API Documentation
  • Manager Training
  • Developer Training
  • Tags
  • More
  • Cancel
  • New
  • +Telligent Community 10.x User Documentation
  • Changing system terminology
  • Community and GDPR
  • How are wiki page editing conflicts handled?
  • How can I adjust what makes a thread popular within forums?
  • How can I administer available emoticons and emoji?
  • How can I allow members to customize their homepage/dashboard?
  • How can I allow users to delete their own accounts?
  • How can I change the requirements for requesting friendships?
  • How can I configure how members can join the site and their initial experience?
  • How can I control the RSS feeds that are provided for a blog?
  • How can I control the types and sizes of files that members can upload?
  • How can I control types, number, and total storage allowance for files in a media gallery?
  • How can I control whether forum thread and reply authors can edit or delete their own posts?
  • How can I control which actions members can perform on a blog?
  • How can I control which actions members can perform within a forum?
  • How can I control which actions members can perform within a media gallery?
  • How can I control which types of files can be embedded within forum threads and replies?
  • How can I customize messaging to new members?
  • How can I customize the content in aggregate blog RSS feeds?
  • How can I customize the content or delivery time of email digest?
  • How can I customize the fields available on members’ profiles?
  • How can I diagnose a problem or get help?
  • How can I enable a guest blogger on a blog?
  • How can I enable authentication via Windows / Active Directory (AD)?
  • How can I enable multiple members to manage a single blog?
  • How can I enable single sign-on (SSO) with another Microsoft .net-based website?
  • How can I enable single sign-on (SSO)?
  • How can I enable support for emailing to start or reply to a forum thread?
  • How can I enable visitors to authenticate through Facebook?
  • How can I enable visitors to authenticate through Google?
  • How can I enable visitors to authenticate through LinkedIn?
  • How can I enable visitors to authenticate through Live Connect?
  • How can I enable visitors to authenticate through Salesforce?
  • How can I enable visitors to authenticate through Twitter?
  • How can I enable visitors to contact the owners of a group?
  • How can I hide a member's forum posts from the community?
  • How can I identify abuse or SPAM within the community?
  • How can I impersonate a user to act on their behalf?
  • How can I include forum behavior in an external website?
  • How can I integrate my community with other websites and services?
  • How can I join a group?
  • How can I limit who or when someone can comment or trackback on a blog post?
  • How can I make a thread stick to the top of the thread list within a forum?
  • How can I manage blog posts with Open Live Writer (formerly Windows Live Writer)?
  • How can I mirror content from another blog or RSS feed?
  • How can I moderate tags within an application?
  • How can I move content from one area of my community to another?
  • How can I prevent SPAM accounts from being created using the ReCaptcha service?
  • How can I prevent spam content from being shown on my community?
  • How can I provide new members with a default set of friends?
  • How can I rebrand my community in an upgrade-safe way?
  • How can I render previews of documents (Word, Excel, PowerPoint, PDFs) in my community?
  • How can I require acceptance of terms of service before member registration?
  • How can I set the default theme and theme selection options for all blogs?
  • How can I set the default theme and theme selection options for all groups?
  • How can I show or require additional profile fields to be completed when members join my community?
  • How can I specify which types of member avatars are allowed and the default member avatar?
  • How can I split a forum thread into multiple threads?
  • How can I start or stop the job service?
  • How can I stop receiving updates from a forum thread?
  • How can I synchronize Active Directory (AD) groups with Telligent Community roles?
  • How can I uninstall the job service?
  • How can I use snippets within blogs to save time or reuse content when writing posts?
  • How can I use the REST API to automate data migrations or data modifications?
  • How can I write blog posts using email?
  • How do I add a community member?
  • How do I add an Achievement?
  • How do I add an idea to an ideation?
  • How do I add or upload a file to a media gallery?
  • How do I administer members?
  • How do I allow users to export their data?
  • How do I ask a question or start a discussion in a forum?
  • How do I automatically create a blog for each new member of the community?
  • How do I ban or disapprove a member?
  • How do I cancel an event in a calendar?
  • How do I capture a forum thread to a wiki?
  • How do I change my avatar?
  • How do I change the types of threads or thread answer and auto-locking configuration for a forum?
  • How do I chat with another member?
  • How do I compare wiki page revisions?
  • How do I configure email integration?
  • How do I configure Telligent Community to meet the privacy requirement of my locale?
  • How do I connect my community to my Verint Knowledge Management site?
  • How do I control the type and functionality of content that can be posted on my community?
  • How do I control types and sizes of files that members can upload?
  • How do I control whether members can post status messages within a group?
  • How do I control which Active Directory (AD) fields are synchronized and editable on member profiles?
  • How do I create a custom page within a theme?
  • How do I create a group?
  • How do I create a Knowledge Collection?
  • How do I create a wiki page?
  • How do I create an application?
  • How do I create an event in a calendar?
  • How do I create rules to automate my community?
  • How do I customize direct communication options such as email, notifications, and private messages?
  • How do I customize email sent from the community?
  • How do I customize the look and feel of my community?
  • How do I delete a blog post?
  • How do I delete a group?
  • How do I delete a Wiki Page?
  • How do I delete an application?
  • How do I delete an event from a calendar?
  • How Do I Deploy my Site to Microsoft Azure?
  • How do I edit a blog post?
  • How do I edit a file or URL in a media gallery?
  • How do I edit a forum thread or reply?
  • How do I edit a wiki page?
  • How do I edit an Achievement?
  • How do I embed custom forms in my community?
  • How do I enable moderation within a forum?
  • How do I enable moderation within a media gallery?
  • How do I enable visitors to contact me through my blog?
  • How do I export my data?
  • How do I get to the administration panel?
  • How do I get to the contextual management panel?
  • How do I implement single sign-on (SSO) with an existing authentication system using cookies?
  • How do I insert a poll into content?
  • How do I install chat support?
  • How do I install Telligent Community?
  • How do I lock a wiki page?
  • How do I manage advertisements in my community?
  • How do I manage comments?
  • How do I manage licenses?
  • How do I manage membership within a group?
  • How do I manage registrations for a calendar event?
  • How do I manage roles and permissions to control what members can do on the community?
  • How Do I Migrate My Existing File Storage to Azure?
  • How do I moderate a forum to move, split, merge, lock threads?
  • How do I moderate content a member creates?
  • How do I monitor the health of my community?
  • How do I preview UI changes in the community?
  • How do I register for an event?
  • How do I rename, change the avatar, or move a group?
  • How do I revert to a previous version of a wiki page?
  • How do I see download counts of files in a media gallery?
  • How do I send an ad-hoc mass email to community members?
  • How do I set the default timezone and date/time formats for my community?
  • How do I setup an about page for a blog?
  • How do I store some files in different locations than others?
  • How do I translate my community?
  • How do I update the status of an idea?
  • How do I upgrade Telligent Community?
  • How do I upgrade the user experience of my community?
  • How do I use the content editor?
  • How do I use wiki link syntax?
  • +How do I view reports?
  • How do I vote on ideas?
  • How do I write a blog post?
  • How does moderation and abuse work?
  • How does Telligent Community support mobile devices?
  • How does Telligent ensure the quality of Telligent Community?
  • How should I define groups and applications in my community?
  • How should I store user contributed media?
  • How should I support multiple languages on my community?
  • Release Notes
  • What are jobs?
  • +What are the system requirements?
  • What best practices should be followed when customizing the user interface?
  • What is a blog?
  • What is a calendar?
  • What is a forum thread?
  • What is a forum?
  • What is a gallery?
  • What is a group?
  • What is a hashtag?
  • What is a Knowledge Document?
  • What is a mention?
  • What is a theme?
  • What is a wiki?
  • What is an Achievement?
  • What is an activity stream?
  • What is an application?
  • What is chat?
  • What is document preview?
  • What is featured content?
  • What is friending and following?
  • What is ideation?
  • What is liking?
  • What is private messaging?
  • What is RSS?
  • What is the question and answer workflow in forums?
  • What type of video files can I embed in my community?
  • What types of videos can I embed in or attach to content?

How do I control which Active Directory (AD) fields are synchronized and editable on member profiles?

This guide assumes that Active Directory / Windows Authentication and LDAP integration is already properly enabled and configured for your Telligent Community site.

The LDAP.config file contains all of the attributes that will be shared by Telligent Community Server and your LDAP source. Using LDAP.config, you can control how the LDAP fields are grouped and viewed/edited on a user's profile page. In this article we will take a look at the various items found in LDAP.config.

[toc]

You can find LDAP.config at <install drive>:\program files\telligent\telligent evolution\web (by default). Let's take a look at each section in the out of the box LDAP.config:

CoreAttributes

Here is the out-of-the-box sample for the CoreAttributes section of the LDAP.config file:

<CoreAttributes UserObjectClass="user"
GroupObjectClass="group"
GroupNameIdentifier="cn"
UserEmail="mail"
UserDomainName="samaccountname"
UserCommonName="cn"
/>

Below you will find a description for each of the elements found in the CoreAttributes object:

Attribute Name Attribute Description
UserObjectClass Corresponds to the class in LDAP under which your users are stored. This should only be changed if you do not query your LDAP source as objectClass=user when searching for users.
GroupObjectClass Corresponds to the class in LDAP under which your groups are stored. This should only be changed if you do not query your LDAP source as objectClass=group when searching for groups.
GroupNameIdentifier Tells Community Server which LDAP field to use when looking up the identifying name for a group.

UserEmail

Tells Community Server which LDAP field to use when looking up a user's email address.

UserDomainName

Tells Community Server which LDAP field to use when referencing the domain username for a given user. Our example uses "samaccountname", which translates into a domain username such as 'jdoe'.

UserCommonName

Tells Community Server which LDAP field to use when looking up the user's common name. An example common name might be 'John Doe'.

Contacts

Here is the out-of-the-box sample for the Contacts section of the LDAP.config file:

<Contacts EnableSyncContacts="true" ObjectClass="contact" CommonName="cn"
BaseDN="OU=Contacts,OU=DomainUsers,DC=internal,DC=company,DC=com">
  <Attribute Name="cn" Value="Evolution$ID" />
  <Attribute Name="name" Value="Evolution$ID" />
  <Attribute Name="displayName" Value="$NAME" />
  <Attribute Name="mail" Value="$EMAIL" />
  <Attribute Name="proxyAddresses" Value="SMTP:$EMAIL" />
  <Attribute Name="targetAddress" Value="smtp:$EMAIL" />
  <Attribute Name="mailNickname" Value="$NAME" />
  <Attribute Name="legacyExchangeDN"
Value="/o=Telligent/ou=Exchange Administrative Group/cn=Recipients/cn=$NAME" />
  <Attribute Name="showInAddressBook"
Value="CN=Default Global Address List,CN=All Global Address Lists,CN=Address Lists Container,CN=Telligent,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=internal,DC=company,DC=com" />
  <Attribute Name="showInAddressBook"
Value="CN=All Contacts,CN=All Address Lists,CN=Address Lists Container,CN=Telligent,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=internal,DC=company,DC=com" />
  <Attribute Name="internetEncoding" Value="1310720" />
  <Attribute Name="msExchRecipientDisplayType" Value="6" />
 </Contacts>

Below you will find the attribute name and descriptions for the Contacts object:

Attribute Name Attribute Description
EnableSyncContacts Possible values are true/false. Determines whether contact information should be synchronized between Community and the LDAP source.
ObjectClass Corresponds to the class in the Telligent codebase that contains the contact information. This should not be modified unless you've changed the corresponding code using the SDK.
CommonName This value should correspond to the LDAP field where the common name is stored.

BaseDN

This value should correspond to the base distinguished name for the contacts object within your LDAP source.

Below you will find the attribute name and descriptions for the Attribute object: 

Attribute Name Attribute Description
Name The name of the contacts LDAP attribute to be set by the attribute tag.
Value The value of the attribute.

AttributeGroup

There are two AttributeGroup sections in the out-of-the-box LDAP.config document that you may desire to modify. The Attribute objects in these sections control which LDAP/Active Directory fields are available to users inside of Community Server.

Here is markup from the out-of-the-box LDAP.config file that shows what an AttributeGroup looks like:

 <AttributeGroup Name="Personal Information" Order="1">
  <Attribute Name="name" DisplayAs="Name" AccessLevel="ReadWrite" />
  <Attribute Name="mailNickname" DisplayAs="Email Alias" AccessLevel="ReadOnly" />
  <Attribute Name="streetAddress" DisplayAs="Address" AccessLevel="ReadWrite" />
  <Attribute Name="l" DisplayAs="City" AccessLevel="ReadWrite" />
  <Attribute Name="st" DisplayAs="State" AccessLevel="ReadWrite" />
  <Attribute Name="postalCode" DisplayAs="Zip Code" AccessLevel="ReadWrite" />
  <Attribute Name="c" DisplayAs="Country/Region" AccessLevel="ReadWrite" />
  <Attribute Name="telephoneNumber" DisplayAs="Telephone Number" AccessLevel="ReadWrite" />
  <Attribute Name="mobile" DisplayAs="Mobile Number" AccessLevel="ReadWrite" />
 </AttributeGroup>

The AttributeGroup object has the following attributes:

Attribute Name Attribute Description
Name The name of the attribute will be used as the tab name in the user profile.
Order The order value controls the order in which the tabs will be displayed in the user profile. This must be a unique value across all AttributeGroups.

The Attribute object has the following attributes:

Attribute Name Attribute Description
Name The name of the LDAP field being used.
DisplayAs The text that will be shown to users in Community Server.
AccessLevel The value controls whether the user can read or edit the value in the user profile. Default = ReadOnly

Read/write functionality requires an LDAP service account with read/write permissions.

You can customize the LDAP fields that Community Server displays in the user profile, and you can add or remove items or whole groups of items if you desire. For example, perhaps your organization relies heavily on instant messaging (IM) and your employees change their IM addresses on occasion. You might consider creating an "IM" profile group in the user profile so users can update their IM addresses and view the IM addresses of others in your organization:

First, you would need to create an AttributeGroup that looks something like this:

 <AttributeGroup Name="IM" Order="3">
 </AttributeGroup>

The markup above will create a tab in the user profile with the label "IM". Since there are two AttributeGroups defined in the out-of-the-box LDAP.config file, we would set the Order to "3" so it will be the third tab in the user profile.

Next, we need to add the IM address fields for each of the IM services that the employees use regularly. The markup might look like this:

  <Attribute Name="msn" DisplayAs="MSN" AccessLevel="ReadOnly" />
  <Attribute Name="AOL" DisplayAs="America Online" AccessLevel="ReadWrite" />
  <Attribute Name="icq" DisplayAs="ICQ" AccessLevel="ReadWrite" />
  <Attribute Name="Yahoo" DisplayAs="Yahoo!" AccessLevel="ReadWrite" />

The first object has an AccessLevel of "ReadOnly". This means that users will not be able to update this value in the user profile; they will be able to view the value.

  • Share
  • History
  • More
  • Cancel
Related
Recommended
  • Telligent
  • Professional Services
  • Submit a Support Ticket
  • Become a Partner
  • Request a Demo
  • Contact Us

About
Privacy Policy
Terms of use
Copyright 2022 Verint, Inc.
Powered by Verint Community