Directory service settings | EPM-WM Cloud

Configure Active Directory (AD) connectors to discover AD groups in your estate. The Policy Editor queries the Active Directory to populate the group information when adding account filters or designated users.

After the connectors are set up, the Policy Editor can discover and read information from the Active Directory source. The screen capture shows an example when adding an account filter for a workstyle.

ℹ️

A standard user requires delegated access to this feature. For more information, see User management.

Add Microsoft Entra ID connector

You must create an app registration in Azure before you can configure the Microsoft Entra ID connector here. There can only be one Microsoft Entra ID connector per EPM-WM instance.

ℹ️

For complete end-to-end configuration, see Microsoft Entra ID and EPM config guide.

1. Select Configuration > Directory Service Settings.

2. Select the Microsoft Entra ID tab, and then select Enable Microsoft Entra ID Integration.

   

3. Add the tenant ID and client ID.

4. Select an authentication method. This depends on the app registration details you configured.

ℹ️

For more information, see Microsoft's documentation Quickstart: Register an application with the Microsoft identity platform

Add a local AD connector

Create an on-premises local Active Directory connector that can be queried from the Policy Editor. Adding a local directory makes it easier to add Active Directory users and groups to a policy.

• You must set up one connector for each local Active Directory.
• The connector installation is a Windows service installed to the endpoint. The endpoint requires access to the local directory.
• After the connector is installed and active, the connector is discoverable and available for use.
• If you disable a connector, then the Policy Editor can no longer query Active Directory.
• When deleted, the connector is no longer available in the console and must be reinstalled to be available for queries.

To install the local AD connector:

1. Select Configuration > Adapter Installation to download the connector.
2. On the same page, click the AD Connector button to include the connector in the installation string.
3. After the download is complete, go through the installation wizard to complete the installation.
4. After the connector is installed, select Configuration > Directory Services Settings, and select the Local AD tab.
5. You can edit properties for the connector. The host name is the computer name where the connector is installed; this cannot be changed. You can, however, add a name that is more meaningful.
6. After saving the connector properties, select the connector menu, and then select Enable Connector. The connector must be enabled before it can query the local AD environment.

Edit local AD connector

You can change the name of the local AD connector.

The host name value cannot be changed.

To edit a local AD connector:

1. Select Configuration > Directory Services Settings.
2. Select the Local AD tab.
3. Find the connector in the list.
4. Select > Edit Connector.

Disable a connector

A disabled connector is no longer discoverable by the Policy Editor.

1. Select Configuration > Directory Services Settings.
2. Select the Local AD tab.
3. Find the connector in the list.
4. Select >Disable Connector.

Delete a local AD connector

Delete a local AD connector when it is no longer required. When deleted, the authentication details provided when adding the connector are deleted to ensure communication is no longer available between EPM-WM and the local AD.

1. Select Configuration > Directory Services Settings.
2. Select the Local AD tab.
3. Find the connector in the list.
4. Select > Delete Connector.