Directory Syncing (IWDS)
This documentation refers to IWDS (InWebo Directory Sync).
IWDS is an TrustBuilder MFA option. If you have not yet subscribed to this option, please contact our sales team before attempting any IWDS integration.
About IWDS
IWDS is a Java application allowing any TrustBuilder administrator to do bulk creation, modification and deletion of TrustBuilder MFA users and groups, based on input data taken from an LDAP directory or a .csv file.
IWDS also works in batch mode. In this case, it is installed on a server and launched periodically, using a Task Scheduler (Linux cron or Windows Task Scheduler).
IWDS is developed by TrustBuilder to allow you to synchronize your user's between TrustBuilder MFA administration console and a directory (AD, LDAP, .csv...). It is available on Windows in GUI mode. It supports:
Active Directory
LDAP
User listing file in csv format
IWDS will never write anything in your LDAP directory. IWDS will only read the LDAP. Any creation/modification will be done only on TrustBuilder platform.
How IWDS works?
IWDS works in 4 steps and saves the result in XML files for each of these steps.
As soon as you operate a complete synchronization, you should always start the 4 steps from the beginning, to take into account the last modifications of the previous synchronization.
The retrieval of TrustBuilder objects
TrustBuilder objects are users, roles and groups currently available on the TrustBuilder platform for your service. IWDS accesses our API using the pre-requisite certificate. It retrieves all the elements on the cloud to know the existing state of your service.The retrieval of LDAP objects
IWDS will read access to each of the configured LDAP servers to retrieve all users of the selected groups. These users represent the synchronization source that must be .The difference
IWDS proceeds to the comparison between the retrieved TrustBuilder objects and the retrieved LDAP objects. This generates a list of operations to be carried out to fill the gap between the two sources: creation of the absent users on the TrustBuilder side, deletion of those which are not present anymore, etc...The synchronization
This step consists in sending the list of operations from the “Difference” step to the TrustBuilder platform. Once synchronization done, you can consult the logs or the console to check that the operations have been carried out correctly and that this provisioning step corresponds to your expectations.