On-Prem Active Directory (AD) Integration Setup

Integrate on-Prem Active Directory server with BalkanID to do lifecycle management (automatically provision and de-provision accesses) and user access review certifications.

Currently, the following will be supported.

• Create Users

• Delete Users

• Create Groups

• Delete Groups

• Add Users to Group

• Remove Users from Group

To support additional functions in your agent or customize your agent per your needs, contact the BalkanID support team and they will be able to assist.

Integrate your On-Prem Active Directory instance

Once the BalkanID Active Directory is installed and the integration is set up, it runs as a service in your environment. The service maintains contact with BalkanID, syncs and uploads data at regular intervals, and passes that data to the BalkanID platform. Once setup, BalkanID application can be used to provision and de-provision access to Active Directory.

Requirements:

• API URL

• Domain

• API Key (From the Agent)

Step 1: Install BalkanID Active Directory Agent

1. Contact BalkanID support to get the latest version of the agent.

2. Install and set up the agent by running and following the steps:

   1. Run the Installer shared to you by the BalkanID Team.

   2. Follow the instructions in the setup.

3. Make sure to note your VM public IP and the port the agent (default 5000 for HTTP, 5001 for HTTPS) is running on, you will need this in step-2.

4. A new background Windows program named BalkanID Agent will be created. This program is used to provision and de-provision on active directory and allow BalkanID to receive data from active directory.

Before you move to step-2, ensure appropriate networking is exposed on the system where the BalkanID Agent is installed.

Step 2: Set up the Active Directory connector in BalkanID

1. Login to the BalkanID application and switch to the tenant you would like to add your integration to.

2. Head to Integrations > Add Integration, select Active Directory.

   

   
3. Set up the Primary Application owner (mandatory) and the Description, if any. Set up Secondary Application Owner(s), if any. Now enter the configuration.

1. On the BalkanID application, under Configure > Integrations > you can view the status of the sync at any point in time under “Status” column, which may show “Syncing” , followed by “Connected” once successfully uploaded. It usually takes some time for the data to be processed and appear on the BalkanID application. During that period, the “Message” column may display “Data Processing”, followed by “Data available” once the data is available on the BalkanID application. Any errors will be displayed either on the console where the agent is run as well as under “Message” as error.

1. To check that the data uploaded correctly. On BalkanID application, click Entities > Applications, locate and click the name of the integration corresponding to Active Directory. Active Directory data should be found on the Identities, Connections and Access tabs.