Symantec IGA

Hi all,

In PXP when we use LDAP Query in DATA Element, we need to input "Full USER DN", "Password", "LDAP Server Name" etc.

To change those parameters, especially "Password", we need to edit PXP in many places.

Anybody know, how can we define such parameters anywhere at Environment level, and use those definitions later in PXP ?

Regards,

Andrej

Hi Andrej

This is possible.

Does require a bit of additon to your PX.

What you can do is something like this.

Create a table in for example your object store that contains info about your connection.

I created a table containing port, userdn, password, searchroot, searchfilter,attributename

Add the needed information into the table. However, make sure that the password is encrypted in {PBES} format

Now you can add in your px in the data tab before your ldap query datasource/sql query/get and get all the attribute you need.

When you have added all of the info you need, modify the ldap query command and use the dropdown list to add the different attributes to the search.

Please note that there are no dropdown for the Password.

To be able to use the fetched attribute for the password, you would need to (when finished) export it to xml and replace your password data (the part in the PX that starts with {PBES}) with for example {'GetPassword'} (if you named fetching of this attribute as GetPassword). Then import it again.

Remember that the password you fetch needs to be encrypted.

Remember that in the GUI, it will just show star and that it can be easy to overwrite the info

Cheers, Atle

Hi Atle,

thank you for right answer.

Best regards,

Andrej