vRA7 Adding Directory Services

1. Login with the Local account you created. Select Administration > Directories Management > Directories.

2. Click Add Directory and On the Add Directory page, specify the IP address or FQDN of AD server in the Directory Name text box.

Select the appropriate protocol using the radio buttons under the Directory Name text box.

• If you are using Windows authentication, select Active Directory (Integrated Windows Authentication).
• If you are using LDAP to support SSL, select Active Directory over LDAP.

3. In the Directory Sync and Authentication section, click the connector drop down and 

     a. Select the appropriate connector to use for your system. Note: Each vRealize          
         Automation appliance contains a default connector.

     b. Select the appropriate authentication for your system in the Authentication text     
         box.

     c. Select an Attribute from the drop down list.

     d. In the Server Location field, click the 'This directory supports DNS Service 
         Location check box'. This is required when you use DNS Service Location Lookup.

4. In the Bind User Details section, enter the Base DN and Bind DN to facilitate directory synchronization.

     a. For Active Directory over LDAP: Enter the search Base and Bind Distinguished 
         Names. Enter the appropriate Bind DN password for your system.

     b. For Active Directory (Integrated Windows Authentication): In the Bind User UPN 
         text box, enter the User Principal Name of the user who can authenticate
         with the domain. Enter the Bind User password.

5. Click Test Connection to test the connection to the configured directory.

6. Click Save & Next.

7. The Select the Domains page appears with the list of domains. Check the appropriate Domain.

Note: For Active Directory over LDAP, the domains are listed with a checkmark. For Active Directory (Integrated Windows Authentication), select the correct domains.

8. Map the user attributes. Click Next.

9. Search the group DN and select the correct group that will have access to the vRA. Click Next.

10. Select the specific group users to be synced. Click Next.

11. Select the Users to be synced. This is optional and can be left default.

12. Review the Users and Groups and Click Save & Sync.

13. Once the Sync is complete log out and test your login using the Active Directory account. At the login page, select 'Sign in to a different domain'.

14. Select the domain you configured and login to that.

And now login.