Connectors

Identity & Access Management

LDAP / Active Directory

Directory services: read, search, add, and change entries, manage group members, and reset passwords
Signs in with
Connection details
Runs on
Cloud or On-Prem Worker
Operations
16
Ready-made triggers
3

Connect LDAP / Active Directory

  1. In Neblex open Connect › Connections and click New Connection.
  2. Search for LDAP / Active Directory and give the connection a clear name.
  3. Fill in the fields. Secret values are encrypted and never shown again.
  4. Click Test, then Create Connection.
If the system is only reachable inside your network, choose an On-Prem Worker under Test from and run the flow on that Worker. See On-Prem Workers.
FieldWhat to enter
HostRequiredThe directory server or domain controller host name.
PortOptionalLeave empty for 636 with LDAPS or 389 otherwise.Example: 636
SecurityRequiredPlaintext sends the bind password without encryption. Use it only for a customer-controlled directory that requires it.
Bind DN or userOptionalFor example cn=svc-sync,ou=Service,dc=example,dc=com, or [email protected] for Active Directory. Leave empty for an anonymous bind.
PasswordOptionalSecret
Default base DNOptionalUsed when a search names no base, for example dc=example,dc=com.
Server CA certificate (PEM)OptionalOptional private CA, such as an Active Directory Certificate Services root. Leave empty for publicly trusted certificates.

Triggers

Start a flow when something changes in LDAP / Active Directory: add a Poll for changes trigger, choose LDAP / Active Directory and pick the event.

EventWhat it doesHow
Entry addedFires for each entry matching the search that appeared since the last check.Checks for changes
Entry changedFires for each entry matching the search whose attributes changed since the last check.Checks for changes
Entry removedFires for each entry that no longer matches the search since the last check.Checks for changes

Use it in a flow

  1. Open a flow, open the node library and search for LDAP / Active Directory.
  2. Drag it onto the canvas and choose an Operation and your connection.
  3. Map the operation's fields from earlier steps, or click Map with Matt.
  4. Use Test this step to see what it returns, then save.

Operations

16 operations in 5 groups. Each one is a step you can add to a flow.

Connection2
Test the connectionpingConnect, bind, and return the authenticated identity.
Who am IwhoAmIReturn the identity the connection is bound as.
Directory2
Read the root DSEreadRootDseRead the server's naming contexts, supported controls, extensions and versions.
Run an extended operationexecuteExtendedOperationSend any LDAP extended operation by OID and return the server's response.
Entry7
Add an entryaddEntryCreate an entry with its object classes and attributes.
Compare an attributecompareAttributeCheck whether an entry's attribute holds a value, without reading it.
Delete an entrydeleteEntryDelete an entry, or with Subtree an Active Directory entry and everything below it.
Get an entrygetEntryRead one entry by DN.
Modify an entrymodifyEntryAdd, replace, delete or increment attribute values in one atomic change.
Rename or move an entryrenameEntryChange an entry's RDN and optionally move it under a new parent.
Search entriessearchSearch the directory and return one record per entry, reading every page.
Group2
Add a group memberaddGroupMemberAdd a member DN to a group.
Remove a group memberremoveGroupMemberRemove a member DN from a group.
Password3
Change a passwordsetPasswordChange or reset a password with the password modify operation.
Change an Active Directory passwordupdateAdPasswordChange a user's Active Directory password by proving the current one.
Reset an Active Directory passwordresetAdPasswordSet a user's Active Directory password as an administrator.