Alternatives for ManagedObjects (With ARS)

In an environment where we are already using the Manager and DirectReports attributes, we are trying to get automatic account linking up and running.

What are some good alternatives for the "managedObjects" field in the AD identity attributes?

We do have ARS, so as a secondary question; is it possible to use an ARS attribute in this way? Or is more configuration needed in order to use ARS attributes?

Parents
  • Hi Andrew,

    You should technically be able to use any custom Backlink attribute of the AD User object as long as it contains the distinguished name of the privileged account (Linked Account) as its value and you have configured the AD provider in Safeguard Access > Identity and Authentication > AD provider > Attributes tab > Managed Objects = mapped to that custom Backlink attribute.

    Thanks!

Reply
  • Hi Andrew,

    You should technically be able to use any custom Backlink attribute of the AD User object as long as it contains the distinguished name of the privileged account (Linked Account) as its value and you have configured the AD provider in Safeguard Access > Identity and Authentication > AD provider > Attributes tab > Managed Objects = mapped to that custom Backlink attribute.

    Thanks!

Children