You can add an endpoint and configure the Active Directory plug-in to connect to a running Active Directory instance and manage users and user groups, Active Directory computers, organizational units, and so on.

Important

By using the Microsoft Active Directory plug-in, you can orchestrate only one connection to an Active Directory host. You cannot add multiple Microsoft Active Directory instances as endpoints. You cannot delete an Active Directory endpoint. After you add an Active Directory endpoint, you can update it at any time.

Prerequisites
■

Verify that you have access to a Microsoft Active Directory instance. See the Microsoft Active Directory documentation.

■

Log in to the vCloud Automation Center console as a tenant administrator.

Procedure
1

Select Administration > Advanced Services > Endpoints.

2

Click Add (Add a new resource action).

3

Select Active Directory from the Plug-in drop-down menu.

4

Click Next.

5

Enter a name and, optionally, a description.

6

Click Next.

7

Configure the Active Directory server details.

a

Enter the IP address or the DNS name of the host on which Active Directory runs in the host text box.

b

Enter the lookup port of your Active Directory server in the port text box.

vCenter Orchestrator supports the Active Directory hierarchical domains structure. If your domain controller is configured to use Global Catalog, you must use port 3268. You cannot use the default port 389 to connect to the Global Catalog server.

c

Enter the root element of the Active Directory service in the ldapBase text box.

For example, if your domain name is mycompany.com, then your root Active Directory is dc=mycompany,dc=com.

This node is used for browsing your service directory after entering the appropriate credentials. For large service directories, specifying a node in the tree narrows the search and improves performance. For example, rather than searching in the entire directory, you can specify ou=employees,dc=mycompany,dc=com. This root element displays all the users in the Employees group.

d

(Optional) To activate encrypted certification for the connection between vCenter Orchestrator and Active Directory, select Yes from the useSSL drop-down menu.

Note

The SSL certificate is automatically imported without prompting for confirmation even if the certificate is self-signed.

e

(Optional) Enter the default domain in the defaultDomain text box.

For example, if your domain name is mycompany.com, type @mycompany.com.

8

Configure the shared session settings.

a

Enter the user name for the shared session in the sharedUserName text box.

a

Enter the password for the shared session in the sharedUserPassword text box.

9

Click Add.

You added an Active Directory instance as an endpoint. Service architects can use the Advanced Service Designer to publish Active Directory plug-in workflows as catalog items and resource actions.