Author Topic: synchronize EA with Active directory  (Read 20847 times)

Yehuda

  • EA Novice
  • *
  • Posts: 7
  • Karma: +0/-0
    • View Profile
synchronize EA with Active directory
« on: March 25, 2010, 03:52:03 am »

Hi,
Is there a way to synchronize EA with Active directory group(s)?
i.e. - When a user is added to A.D. group it will automatically be previlidged with EA security permitions (according to his group)?
I have notice the improt option - can it be invoked using the automation Model, in order to achieve this synchronization?
Can users be deleted from EA security group  by automation/

Thanks in advance,
Yehuda

Geert Bellekens

  • EA Guru
  • *****
  • Posts: 13256
  • Karma: +554/-33
  • Make EA work for YOU!
    • View Profile
    • Enterprise Architect Consultant and Value Added Reseller
Re:  synchronize EA with Active directory
« Reply #1 on: March 25, 2010, 05:57:31 pm »
I haven't found anything in the API to manage security users.
If you really need to you can ofcourse edit the database directly, but that should be considered a last resort.

Geert

Yehuda

  • EA Novice
  • *
  • Posts: 7
  • Karma: +0/-0
    • View Profile
Re:  synchronize EA with Active directory
« Reply #2 on: March 25, 2010, 08:49:40 pm »
Thanks Greet for your reply. I think that I'll keep using the Version control based permissions for now.
Managing additinal user groups in EA requires too much maintenance.

Yehuda
« Last Edit: March 25, 2010, 08:50:27 pm by yassulin »

metasprite

  • EA Novice
  • *
  • Posts: 9
  • Karma: +0/-0
    • View Profile
Re: synchronize EA with Active directory
« Reply #3 on: February 01, 2017, 11:32:42 am »
Hiyas,
Any chance this can be done now... nearly seven years later?
Cheers, Donna.

Glassboy

  • EA Practitioner
  • ***
  • Posts: 1367
  • Karma: +112/-75
    • View Profile
Re: synchronize EA with Active directory
« Reply #4 on: February 01, 2017, 03:02:16 pm »
Hiyas,
Any chance this can be done now... nearly seven years later?
Cheers, Donna.

If you have an Identity Management solution chances are there's an API call that will create a user.

It's not really the role of EA to become an IAM.

Uffe

  • EA Practitioner
  • ***
  • Posts: 1859
  • Karma: +133/-14
  • Flutes: 1; Clarinets: 1; Saxes: 5 and counting
    • View Profile
Re: synchronize EA with Active directory
« Reply #5 on: February 01, 2017, 08:28:52 pm »
Hello Donna,


Although AD groups can be used to control access to licenses, they can't be used to manage project access.

But I can't help thinking it should be doable. In fact I've got some ideas on how it could be achieved, but it would mean some restrictions on how you deploy your EA projects.

It would also require a greater development effort than I'm prepared to take on as a one-man EA consultant. But if there's a potential customer out there this is one of those things I'd love to get stuck into. The un-enterprise-iness is one of my pet peeves with EA, and an effective AD integration would go a fair way towards resolving that.


/Uffe
My theories are always correct, just apply them to the right reality.

Paolo F Cantoni

  • EA Guru
  • *****
  • Posts: 8595
  • Karma: +256/-129
  • Inconsistently correct systems DON'T EXIST!
    • View Profile
Re: synchronize EA with Active directory
« Reply #6 on: February 02, 2017, 10:49:52 am »
Hello Donna,


Although AD groups can be used to control access to licenses, they can't be used to manage project access.

But I can't help thinking it should be doable. In fact I've got some ideas on how it could be achieved, but it would mean some restrictions on how you deploy your EA projects.

It would also require a greater development effort than I'm prepared to take on as a one-man EA consultant. But if there's a potential customer out there this is one of those things I'd love to get stuck into. The un-enterprise-iness is one of my pet peeves with EA, and an effective AD integration would go a fair way towards resolving that.


/Uffe
(My emphasis)

You and a pile of us!  But then, as we know, we live in a post-truth environment where words no longer mean anything.

Paolo
Inconsistently correct systems DON'T EXIST!
... Therefore, aim for consistency; in the expectation of achieving correctness....
-Semantica-
Helsinki Principle Rules!

Geert Bellekens

  • EA Guru
  • *****
  • Posts: 13256
  • Karma: +554/-33
  • Make EA work for YOU!
    • View Profile
    • Enterprise Architect Consultant and Value Added Reseller
Re: synchronize EA with Active directory
« Reply #7 on: February 03, 2017, 06:01:11 am »
In think currently you can actually assign an AD group to a EA security group can't you?
I haven't actually used it, but at the group level there's a checkbox "link to Active Directory" and there is a Sync button that I suppose will synchronize the EA users with the AD users of that group.

Geert

Glassboy

  • EA Practitioner
  • ***
  • Posts: 1367
  • Karma: +112/-75
    • View Profile
Re: synchronize EA with Active directory
« Reply #8 on: February 03, 2017, 08:06:52 am »
It would also require a greater development effort than I'm prepared to take on as a one-man EA consultant. But if there's a potential customer out there this is one of those things I'd love to get stuck into. The un-enterprise-iness is one of my pet peeves with EA, and an effective AD integration would go a fair way towards resolving that.

Be very careful what you wish for.

TomSamyn

  • EA Novice
  • *
  • Posts: 2
  • Karma: +0/-0
    • View Profile
Re: synchronize EA with Active directory
« Reply #9 on: January 31, 2019, 12:07:58 am »
Anyone found a solution to synchronize EA acces rights with Active directory group(s)?
The AD-link flag in EA is not covering this request.
thxs

Geert Bellekens

  • EA Guru
  • *****
  • Posts: 13256
  • Karma: +554/-33
  • Make EA work for YOU!
    • View Profile
    • Enterprise Architect Consultant and Value Added Reseller
Re: synchronize EA with Active directory
« Reply #10 on: January 31, 2019, 05:15:43 am »
if you are using the latest version (14.1.1427) this should work.

Geert

steen.jensen

  • EA User
  • **
  • Posts: 181
  • Karma: +8/-1
    • View Profile
Re: synchronize EA with Active directory
« Reply #11 on: January 31, 2019, 10:28:41 am »
Quote
if you are using the latest version (14.1.1427) this should work.

Geert

Hmm, as I read you can only import users from a Active directory group manually :(
https://sparxsystems.com/enterprise_architect_user_guide/14.0/team_support/import_user_ids_from_active_di.html

Cant find any new doc for EA v 14.1

Geert Bellekens

  • EA Guru
  • *****
  • Posts: 13256
  • Karma: +554/-33
  • Make EA work for YOU!
    • View Profile
    • Enterprise Architect Consultant and Value Added Reseller
Re: synchronize EA with Active directory
« Reply #12 on: January 31, 2019, 03:38:49 pm »
I don't remember exactly how you do it, but we discussed it in this forum a while ago.

I do remember that it was not exactly the most intuitive way.

Geert

mmontminy

  • EA User
  • **
  • Posts: 37
  • Karma: +0/-0
    • View Profile
Re: synchronize EA with Active directory
« Reply #13 on: February 28, 2019, 02:12:49 am »
Update:
I should have read the history of Changes and fixes for Build 1427. (https://sparxsystems.com/products/ea/history.html)

•Added option to automatically maintain the list of available users based on Windows Active Directory or OpenID groups


We are also trying to make this works. We are using version 14.0.1423 and when I look at the "Security Users" screen it doesn't match the documentation.

The documentation has more options such as:
  • Allow 'Remember Me'
  • Accept OpenID Authentification
  • Restrict access to Windows & OpenID user only
  • Automatically create or modify Windows or OpenID users

When I read the documentation, I thought that by enabling the option "Automatically create or modify Windows or OpenID users", the EA group would be kept in synch with Active Directory groups.

Unfortunately, I don't have the option so I cannot try it. Anybody has the latest version? Are these options available?
« Last Edit: February 28, 2019, 02:23:57 am by mmontminy »
Martin

Geert Bellekens

  • EA Guru
  • *****
  • Posts: 13256
  • Karma: +554/-33
  • Make EA work for YOU!
    • View Profile
    • Enterprise Architect Consultant and Value Added Reseller
Re: synchronize EA with Active directory
« Reply #14 on: February 28, 2019, 03:04:01 am »
Yes, in version 14.1.1428 these options are present.

I haven't used them yet though

Geert