Directory Services Synchronization: Field Attribute Mappings

when configuring swimlane's directory services (ds), the default values usually work fine however, there are times when the defaults do not provide the expected results this is typically due to the environment's ds customizations and requires an investigation into their ds tree structure to determine the correct field attributes to be selected rather than using specific defaults for example, one domain may use the value within displayname as the primary means of identifying a person, while another may use userprincipalname , or samaccountname without querying the domain's ds schema field configurations, you might have to determine the ldap attributes through trial and error instead of that time consuming activity, consider the help provided in this topic to troubleshoot this issue see the table below to view some of the available active directory fields for a user this table also shows the associated ldap attribute for the corresponding ad schema field common ad to ldap mappings for users active directory field ldap attribute general tab first name givenname initials initials last name sn display name displayname description description office physicaldeliveryofficename telephone number telephonenumber telephone number (other button) othertelephone e mail mail web page wwwhomepage web page (other button) url account tab user logon name userprincipalname user logon name (pre windows 2000) samaccountname organization tab title title department department company company manager manager direct reports directreports determine field attribute mappings use a utility such as microsoft's active directory service interface editor, or adsi edit, to get a view into the objects and attributes in active directory other similar utilities include ldapsoft's ad browser, sysinternal's ad explorer, etc swimlane recommends asdsi edit as it, like active directory is a microsoft product and is readily available the adsi edit utility can be added via server manager if its not already available/installed if these utilities are not available, you can try the dsquery or ldapsearch command line tools installing and using adsi edit to install and use adsi edit install/add this utility open and connect to the domain controller or ds server navigate to the object you wish to analyze, or view any user or group object to view the attributes that have the appropriate value to be synced observe the results and identify the ad schema field's ldap attribute that is not synchronizing modify the swimlane configuration to specify the new field attribute and see if the sync results are now as expected if not, repeat steps 3 5