Microsoft Active Directory policy

A Microsoft Active Directory policy contains the connection details that are used by a Microsoft Active Directory Input or a Microsoft Active Directory Request node when connecting to a Microsoft Active Directory application.

You can use a Microsoft Active Directory Request node in a message flow to connect IBM® App Connect Enterprise to Microsoft Active Directory applications and issue requests to perform actions on objects such as computers, contacts, entries, groups, InetOrg person objects, organizational units, and users. You can use a Microsoft Active Directory Input node to monitor and accept input from Microsoft Active Directory. The Microsoft Active Directory policy controls, at run time, access to the Microsoft Active Directory application.

The Microsoft Active Directory policy is created when you configure a connection between a Microsoft Active Directory Request or Microsoft Active Directory Input node and Microsoft Active Directory by using the Connector Discovery wizard. During the process of discovery, account credentials are stored in the vault and connection details are stored in a Microsoft Active Directory policy. The policy is created with a type of Microsoft Active Directory, and the name of the policy is returned to the Microsoft Active Directory node and specified in the Connection tab of the node, in the format {policyProjectName}:policyName.

You can also create, update, or delete a Microsoft Active Directory policy by using the Manage Discovery Connector Policies and Credentials wizard, which you can access by right-clicking the policy project in the IBM App Connect Enterprise Toolkit and then clicking New > Discovery Connector policies and credentials.

You must deploy this policy before message flows that use the policy are started. If you redeploy a Microsoft Active Directory policy, all message flows that are using the policy are stopped and restarted.

For more information about using Microsoft Active Directory policies, see Using Microsoft Active Directory with IBM App Connect Enterprise.

Table 1. Properties of the Microsoft Active Directory policy
Property	Property name in .policyxml file	Description of properties
Microsoft Active Directory Application Type	applicationType	This property is reserved for future use and must be set to the value `online`.
Microsoft Active Directory Application Version	applicationVersion	This property is reserved for future use and must be set to the value `v1`.
Microsoft Active Directory Authentication method	authenticationMethod	This property specifies the type of authentication that is used for the connection between IBM App Connect Enterprise and Microsoft Active Directory. This property is reserved for future use and must be set to `BASIC`.
Microsoft Active Directory URL	endpointUrl	A valid Microsoft Active Directory URL in the format `ldap://<host or IP address>:<port>`.
Credential Name	credentialName	This property specifies the name of the credential that is used for the connection to Microsoft Active Directory. The specified credential can be defined during connector discovery and stored in the vault. Alternatively, you can specify an existing credential that was configured by using the mqsicredentials command or the server.conf.yaml file, or loaded through an external credential provider.
Proxy name	proxyId	This property specifies the name of the HTTP Proxy policy that contains details of the HTTP Proxy server URL and the HTTPProxy credential used to make the connection.