Selecting which cardholder fields to synchronize with Active Directory

Before synchronizing with the AD, you need to select which cardholder attributes you want to import from the AD by mapping them to Security Center fields in the Links tab of the Active Directory role. The mapping can be different for each Active Directory role in your system.

What you should know

The cardholder picture field can be mapped to any AD binary attribute if you just want to import them from the AD. But if you want to upload the cardholder pictures from Security Center to the AD, then you must map it to the AD attribute thumbnailPhoto.

To map AD attributes to cardholder fields:

  1. From the Links tab of the Active Directory role, click Add an item ().
  2. Select a Security Center cardholder field and an AD attribute, and then click OK.
    IMPORTANT: The data type of the Security Center field must match that of the AD attribute: text with text, decimal with decimal, date with date, and so on. The Security Center image data type must be mapped to the AD binary data type, and the mapped AD attribute must contain a valid JPEG image.

    The new mapping appears in the Links tab.

  3. Repeat the previous steps as needed.
  4. If you are importing cardholder credential fields, do the following in the Links tab:
    • From the Card format drop-down list, select the default card format to use for the imported cardholder credentials when the card format property is either not mapped to an AD attribute, or when the mapped attribute is empty.
    • From the Badge template drop-down list, select a default badge template to use for the imported cardholder credentials.
  5. Click Apply.

The mapped cardholder fields are displayed in the Links tab. When you synchronize with the AD, most of them are read-only.