LDAP

SISfm can optionally access data from an organisation's LDAP (Lightweight Directory Access Protocol) environment, using matches with a unique personnel number and with email addresses.

To enable LDAP access define the DbConnectionLDAP and DbTableLDAP settings.

The following LDAP fields are accessed:

objectClass Only records with 'user' values are accessed.
objectCategory Only records with 'person' values are accessed.
employeeID Person's personnel number, matched with column em.em_number with the following conditions:
  • em.em_number may not be left-padded with zeros nor exceed 6 digits.
  • ads.employeeID must be left-padded with zeros to 6 digits.
mail Person's email address. Used by Space Manager and Map Enquiry searching.
displayName Person's display name. Used by Move Manager.
givenName Person's first name. Used by Move Manager.
sn Person's last name. Used by Move Manager.
telephoneNumber Person's telephone number. Accessed if EmExtensionFromLDAP is TRUE.

Because LDAP performance can be slow, the DbEnableADS setting can be set TRUE to access this data from table ADS (named after the Microsoft LDAP implementation, Active Directory Services) in the facility database:

The ads table must be periodically populated with each personnel number and corresponding email address obtained from LDAP. This operation is outside the scope of SISfm itself.