There are two ways to integrate emplo with Microsoft Active Directory:
- Single Sign-On (SSO) – integration that consists in allowing the user to log into emplo with AD (Active Directory) login and password. This type of integration consists in configuring ADFS (Active Directory Federation Services), which is described in a separate document.
- EmploAdImport– import and synchronisation of the list of users from Active Directory by means of a client application (exe) that operates on the Client’s server (within the Client’s network) and sends data to emplo over the emplo API (over HTTPS).
Both types of integration operate independently of each other. One can configure any of them or both.
Both SSO and EmploAdImport allow the user data in emplo to be automatically filled in on the basis of the data available in Active Directory. The synchronisation can be carried out only in one direction: from Active Directory to emplo.
During SSO integration, it is possible to update the data of a single user every time they log into the system. In case the user does not exist in emplo, the relevant account will be automatically created after the first log in. Then, the user is faced with a registration form, where they can fill in the data that were missing in AD. The user profile is automatically supplemented/updated on the basis of claims returned from AD after each successful logging through SSO. The SSO-related data synchronisation is conditioned by the user’s logging into the system. At the moment of logging in, emplo system has no access to the data of other users. In particular, if the manager of the person logging into the system has not logged into the system yet, emplo will have no possibility to automatically establish the manager’s account. The manager will remain missing, until they log into the system.
Integration through EmploAdImport allows the complete list of users to be synchronised, irrespective of particular logging actions. Synchronisation may be carried out periodically or on request, at any moment. A typical scenario involves the periodic launching of the synchronisation process (e.g. through Windows Scheduler) once every 24 hours. The first launching of EmploAdImport will automatically create users-related data in emplo, namely positions, companies and units.
| Previous | Next |