Perform the following to configure an external server for each host in the deployment:
-
Configure a PingDirectory Server as an external
server, which will later be configured as a Sync Source. On PingDataSync, run the following
dsconfig command:
$ bin/dsconfig create-external-server \ --server-name source-ds \ --type ping-identity-ds \ --set server-host-name:ds1.example.com \ --set server-port:636 \ --set "bind-dn:cn=Directory Manager" \ --set password:secret \ --set connection-security:ssl \ --set key-manager-provider:Null \ --set trust-manager-provider:JKS
-
Configure the SCIM server as an external server, which will later be configured as
a Sync Destination. The
scim-service-url
property specifies the complete URL used to access the SCIM service provider. The user-name property specifies the account used to connect to the SCIM service provider. By default, the value iscn=Sync User,cn=Root DNs,cn=config
. Some SCIM service providers may not have the user name in DN format.$ bin/dsconfig create-external-server \ --server-name scim \ --type scim \ --set scim-service-url:https://scim1.example.com:8443 \ --set "user-name:cn=Sync User,cn=Root DNs,cn=config" \ --set password:secret \ --set connection-security:ssl \ --set hostname-verification-method:strict \ --set trust-manager-provider:JKS