Active Directory Synchronization Configuration Reference

Active Directory Synchronization Configuration Reference

The following tables describe all the configuration items in the Active Directory Synchronization Profiles.

Active Directory General Information Section

Configuration Parameter Name

Description

Sample Value

Configuration Parameter Name

Description

Sample Value

Description

The profile's talkative name

Recorded Users

Enabled

Disabled profiles will not be synchronized.

Yes

Sequence

Each user will be processed by only one Active Directory Profile, so the Profile with the smaller sequence will process users read from multiple profiles.

100

Active Directory Type

The type of the Active Directory the profile will be connected to. This setting determines whether the LDAP Active Directory or the Azure Active Directory related settings will be shown in the next section.

LDAP

Active Directory Information Section

Configuration Parameter Name

Description

Sample Value

Configuration Parameter Name

Description

Sample Value

LDAP Host

Hostname of the AD / LDAP server.

ad.mycompany.com

LDAP Port

Port number of the AD / LDAP server. The default port is 389 (636 if SSL is used), Active Directory Global Catalog Forest-Wide port is 3268 (3269 if SSL is used).

389

Use SSL

If enabled Verba uses secure connection to connect to your LDAP host.

 

Character Encoding

What character encoding should be used when reading from the AD / LDAP server.

ISO-8859-1

LDAP User Distinguished Name or Domain User Name

The full username that Verba will use when connecting to the AD / LDAP server. This account should have the proper privileges to read the synchronized users. For anonymouslogon, leave it empty. 

mycompany\verba_account

LDAP Password

The password that Verba will use when connecting to the AD / LDAP server. For anonymouslogon, leave it empty. 

secret

 

 

 

LDAP User Search Base

The DN of the container where the synchronized users can be found. Base DNs can be fetched by the button next to the input field. 

OU=Users,DC=mycompany,DC=com

LDAP Search Filter

A valid LDAP Search expression that will be used to filter the entries under LDAP User Search Base.

(&(objectclass=person)(memberOf=CN=Verba_Group,DC=yourdomain,DC=com))

Please make sure that there is no space character at the end!

Search Entry

Fill it with either a simple string like 'Verba_Rec*' or with a valid LDAP filter like (CN=Verba_Rec*) 

 

Simple Paging

Allows Verba to synchronize more than 10,000 people. Turn this option on if the number of users may exceed 10,000.

 

Follow Referrals

Indicates how to handle referrals. If checked Verba follows referrals. If unchecked Verba ignores referrals.

checked

Dereference Policy

The dereference policy is an element of a search quest that specifies how Verba should handle alias entries that may be encountered during search processing.

Allowed alias dereference policy values include:

  • Never: Indicates that Verba should not dereference any aliases that it encounters.

  • Searching: Verba should dereference any entries within the scope of the search operation to determine whether they match the search criteria. The entry specified as the search base DN will not be dereferenced.

  • Finding: Verba should dereference the entry referenced as the search base DN if it is an alias, but any other alias entries within the scope of the search operation will not be dereferenced.

  • Always: Verba will dereference any alias entries within the scope of the search operation and will also dereference the base entry if it is an alias.

 

Never

Azure AD Information

Configuration Parameter Name

Description

Sample Value

Configuration Parameter Name

Description

Sample Value

Tenant ID

The ID of the Azure AD tenant which is being used

 

Application ID

The ID of the Connector App for Verba

 

Application Secret Pass

The secret pass of the Connector App for Verba

 

Azure AD Login

Login credentials for Azure AD. The login button will be shown after the profile is saved.

 

User Search Filter

Graph API users filter parameter.

department eq 'callcenter'

Decode "userPrincipalName" Attribute

If the checkbox above is checked, then the "userPrincipalName" attribute value of Guest users from the Azure AD will be decoded to a valid email address.

 

Merge with Other profiles Section

 Observer user for Four Eyes Login

Description

Sample Value

 Observer user for Four Eyes Login

Description

Sample Value

Profiles to be Merged

List of the Active Directory Synchronization profiles to be merged. The merged profiles will add additional properties to the users synchronized by the base profile.

 

Merge Extensions

Sets if the extension configuration (Phone Number Section from the LDAP Directory Information tab, and the corresponding Recording Settings, Data Sources, Announcement settings from the New Users' Properties tab) will be merged from the profiles added to the Profiles to beMergedlist.

 

Merge Groups

Sets if the group configuration (New Users' Groups setting from the New Users' Properties tab) will be merged from the profiles added to the Profiles to beMergedlist.

 

Merge Roles

Sets if the role configuration (Available Roles setting from the New Users' Properties tab) will be merged from the profiles added to the Profiles to beMergedlist.

 

Synchronized LDAP Attributes Mapping Section

Configuration Parameter Name

Description

Sample Value

Configuration Parameter Name

Description

Sample Value

Display Name

LDAP attribute name that stores the users' full name.

cn

Login ID

LDAP attribute name that stores the users' account name.

sAMAccountName

User Matching ID

 

 

E-mail Address

LDAP attribute name that stores the users' email address

mail

Location Attribute

LDAP attribute name that stores the users' location.

co

Location

This setting will be used when the Location Attribute is not set up or the attribute is not filled in for a user in the AD.

 

Retention Period (days) Attribute

LDAP attribute name that stores the users' retention period

 

Retention Period (days)

This setting will be used when the Retention Period (days) Attribute is not set up or the attribute is not filled in for a user in the AD.

 

Automatically Delete Conversations after the Retention Period is Over

Sets if the recorded conversations belonging to the user should be deleted after the retention period is over

 

Phone Number Section

Configuration Parameter Name

Description

Sample Value

Configuration Parameter Name

Description

Sample Value

Synchronize Phone Numbers

If it is not turned on, Verba will not synchronize phone numbers. If the profile stores users who should not have phone numbers, 
then this setting should be turned on and no extension mapping should be set up.

 

Mapping Presets

You can use our Lync preset or you can create your own custom mappings. New extension maps can be added by pressing
the 

 button below.

 

LDAP Attribute

LDAP attribute name that stores the users' phone number or SIP address.

msRTCSIP-Line

Pattern to Match

A regular expression that will be replaced.

^[tT][eE][lL]:(.*);ext=.*$
^[tT][eE][lL]:.*;ext=(.*)$

Conversion Rule

The regular expression in "Pattern to Match" setting will be replaced by this text or regular expression.

$1

Below you can see an example extension mapping setup:

Verba Groups based on AD Organization Unit Hierarchy Section

Configuration Parameter Name

Description

Sample Value

Configuration Parameter Name

Description

Sample Value

Enable

If it is enabled Verba will generate hierarchical groups based on Active Directory Organization Unit hierarchy

true

Group Naming - Reverse Order

If this setting is turned on, then the name of the created Verba group will be something likecom / company/ Organization / Group Name

Otherwise it will be Group Name / Organization / company /com

true

Group Naming - Separator

If this field is empty, then the attributes will be concatenated in their original form: CN=GroupName,DC=yourdomain,DC=com

/

Group Naming - Skip Top Level

If the top levels of the Organization should be skipped this field can define the number of skipped level.

1 - In this case, the highest level(DC=com) will be skipped.

 

Groups Section

Configuration Parameter Name

Description

Sample Value

Configuration Parameter Name

Description

Sample Value

Synchronize Groups

If it is enabled then Verba will also create groups for the imported users.

true

Verba Groups based on AD Groups

If it is enabled then Verba will follow the AD Group relationships and will create nested groups if required.

true

Synchronized Group Attributes

Comma-separated list of attributes that should be read from a User object.

memberOf

Group Naming - Template

If the created Verba group name should be the simple name of the security group, then set this setting to CN.

If the Verba group's name should contain the whole DN of the group, then set this setting to empty.

CN

Group Naming - Reverse Order

If this setting is turned on, then the name of the created Verba group will be something likecom / company/ Organization / Group Name

Otherwise it will be Group Name / Organization / company /com

true

Group Naming - Separator

If this field is empty, then the attributes will be concatenated in their original form: CN=GroupName,DC=yourdomain,DC=com

/

Filtered Synchronization

Possible values are:

  • Ignore selected groups: Verba will ignore the selected groups and will only create groups with the remaining ones.

  • Synchronize selected groups only: Verba will only create the selected groups.

Synchronize selected groups only

Select Group

Select the groups you would like to be (or not to be, it depends on the Narrow option above) synchronized from the Active Directory. You can select multiple groups.

 

Manager/Direct Reports Section

Configuration Parameter Name

Description

Sample Value

Configuration Parameter Name

Description

Sample Value

Generate Groups Based on Manager/Direct Reports

If it is enabled then Verba will also create groups based on the direct reports. (Note: Feature is enabled only on the synchronized users)

true

Group Name

Naming template for the generated groups.

The following placeholders can be used: [manager_name] [manager_login] [manager_department] [manager_company] 

Direct Reports of [manager_name] ([manager_login])

Add All Parent Managers

If enabled the synchronization will add the manager's manager with the same privileges to the group

true

Manager Roles

 

 

Supervisor

Defines group supervisor permission for the manager(s)

true

Manager

Defines group manager permission for the manager(s)

true

Administator

Defines group administrator permission for the manager(s)

true

Test Connection Section

This section can be used to quickly test whether the configuration is proper. 

Run Full Synchronization

By default, full synchronization is done only at the first run of the Active Directory Synchronization Profile. After that only differential synchronization will be done. If a full synchronization is needed, the checkbox at the Run Full Synchronization setting has to be ticked. This checkbox ticked automatically when the Active Directory Synchronization profile was modified. 

New Users' Properties tab

The New Users' Properties tab can be used to configure what properties should new users be synchronized with to Verba.

A user is considered a new user when it has not previously been synchronized with a certain profile. So for example, if a user was previously synchronized by profile A, but inADit gets moved to another location and now is being synchronized by profile B, then the user is considered a new user. Settings from the new profile replace the settings in the old profile. Previous manual changes are also removed. (The only exception being the Extension assignments)

 

The basic user configuration can be set up here such as Password Generation, Language, Timezone, etc. Since these properties are not synchronized from the AD, these can be customized later for the individual users.

Configuration Parameter Name

Description

Sample Value

Configuration Parameter Name

Description

Sample Value

User type

 

Standard

Change Password at First Logon

 

 

Verba Password Generation

 

Login name + 123

Language

 

English (en)

Default Timezone

 

GMT-05:00 - Jamaica
Eastern Standard Time 

Authorization Workflow

 

 

Retention Period (days)

 

30

Automatically Delete Conversations after the Retention Period is Over

 

 

Observer User (four eyes login)

 Observer user for Four Eyes Login

 

Observer Group (four eyes login)

 Observer group for Four Eyes Login

 

Associated Extension Settings section

Configuration Parameter Name

Description

Sample Value

Configuration Parameter Name

Description

Sample Value

Recording Mode

Here you can select from the available recording modes and apply them to a phone number. The following valid values apply:

Full

Voice

If enabled, Verba records the imported user's voice.

-

Instant Messaging

If enabled, Verba records the imported user's instant Messages.

-

Video

If enabled, Verba records the imported user's video.

-

Desktop Screen

If enabled, Verba records the imported user's desktop screen.

-

Screen & Application Share

If enabled, Verba records the imported user's screen and application window shares in the meetings.