Configure the external servers - PingDirectory - PingDataSync - 9.2

PingDirectory 9.2

bundle
pingdirectory-92
ft:publication_title
PingDirectory 9.2
Product_Version_ce
PingDirectory 9.2
category
Product
pd-92
pingdirectory
ContentType_ce

Perform the following to configure an external server for each host in the deployment:

  1. Configure a PingDirectory server as an external server, which will later be configured as a Sync Source. On PingDataSync, run the following dsconfig command:
    $ bin/dsconfig create-external-server \
      --server-name source-ds \
      --type ping-identity-ds \
      --set server-host-name:ds1.example.com \
      --set server-port:636 \
      --set "bind-dn:cn=Directory Manager" \
      --set password:secret \
      --set connection-security:ssl \
      --set key-manager-provider:Null \
      --set trust-manager-provider:JKS
  2. Configure the System for Cross-domain Identity Management (SCIM)System for Cross-domain Identity Management (SCIM)SCIM An application-level, HTTP-based protocol for provisioning and managing user identity information. SCIM supplies a common schema for representing users and groups and provides a REST API. server as an external server, which will later be configured as a Sync Destination. The scim-service-url property specifies the complete URL used to access the SCIM service provider. The user-name property specifies the account used to connect to the SCIM service provider. By default, the value is cn=Sync User,cn=Root DNs,cn=config. Some SCIM service providers may not have the user name in distinguished name (DN)distinguished name (DN)DN A name uniquely identifying an object within the hierarchy of a directory tree. format.
    $ bin/dsconfig create-external-server \
      --server-name scim \
      --type scim \
      --set scim-service-url:https://scim1.example.com:8443 \
      --set "user-name:cn=Sync User,cn=Root DNs,cn=config" \
      --set password:secret \
      --set connection-security:ssl \
      --set hostname-verification-method:strict \
      --set trust-manager-provider:JKS