FirstClass account automation

FirstClass Account
Automation
Gary Falcon
October 2, 2012

Goals
 What is possible
 What components
& tools to use

X Step-by-step
installation
X Troubleshooting
server-specific
problems

Where are we going?

1. Using FC directory
outside FirstClass

2. External
authentication

3. Account provisioning

Topic 1

USING THE FIRSTCLASS
DIRECTORY OUTSIDE
FIRSTCLASS

Approaches
 LDAP: Internet
Services

 LDAP: Directory
Services

 Data files / ODBC:
Application Services

Why?
 Spam filters
 Web app
authentication
 Network copiers
 PHP applications
 Populate external
systems

LDAP: Internet Services
[Show Config]
 Basic Internet Setup
 Advanced Directory
 LDAP Browser

LDAP: Directory Services
[Config Highlights]
 Directory Setup
 Port, root DN
 Show/Replicate
 Replication > Filtering

LDAP Comparison
Internet Services Directory Services
 Authenticate with UserID  Authenticate with LDAP DN
 All directory objects  Choice of directory objects
using BaseDN
 Global directory only  User contacts
 ClientID as UID  UserID as UID
 Less configurable  More configurable
 LDAP-format DN

Data Exchange Files / ODBC
 Build in FCAS

 Custom built: export
exactly what is required

 Automate schedule

 Write to text file or ODBC
data source

Which to use?
1. Internet Services LDAP: First choice

2. Directory Services LDAP: When #1
doesn’t provide necessary attributes
or function

3. Application Services: When LDAP
functions aren’t available

Topic 2

EXTERNAL
AUTHENTICATION

Why?
 Easier for end-users
 Convenient for
administrators
 Low risk
 High reward

Authentication Workflow
Client User ID &
Password
FCS
FCDS
yes LDAP no
controlled?

yes FCDS no
avail?

yes AD no
avail?

yes Valid
Valid no login?
login?

yes no

Cache data
in FCS Username
Log user in
or PW error

Authentication: Configuration
[Config Highlights]
 Operation mode: LDAP
 Auth method: Remote
 LDAP Server: required
 Gateway: filtering
 Change password: off

Challenges
 Requires SSL for web
logins

 Most recent FCDS may
not allow saved
passwords

FCDS Provisioning
 Works with AD, OpenLDAP
 With or without
authentication
 Account adds / removes /
changes
 Creates groups from OUs
 Matches to sAMAccount
Name (AD) or DN (LDAP)
 One-way replication

Provisioning: Configuration
[Config Highlights]
 Operation mode: LDAP
or Replication
 Enable delete: OFF
 Set schedule
 Test in non-production
environment

Challenges
 OU structure vs/
FirstClass groups

 AD Groups are not
replicated

 Will delete your
directory if you tell it to

Custom Provisioning
 Data can be brought in
from any system
 Handles account adds /
removes / changes
 Flexible handling of group
associations
 Custom apps can follow
any required logic
 Provisioning only; no
authentication

Getting Help
 Limited support from FirstClass
 Aptiris can assist with:
 Support (for Aptiris clients)
 Implementation services
 Ad-hoc consultation
 info@aptiris.com / 877.864.3534

Thank you!

Gary Falcon
gfalcon@aptiris.com

FirstClass account automation

More Related Content

What's hot (12)

Viewers also liked (13)

Similar to FirstClass account automation (20)

Recently uploaded (20)

FirstClass account automation

Editor's Notes