Note: Use the Schedule Tasks tool in a distributed installation of Primavera Portfolio Management (“Scale Out”) from any one of the PPM application servers, to configure for automatic scheduled LDAP synchronization.
- Double-click the file psScheduleTasks.exe located in the “bin” subfolder of the PPM installation directory. By default, this is located at C:\Program Files\Oracle\Primavera Portfolio Management\Portfolios\bin.
- Log in with a PPM user name and password.
- On the Schedule Task window:
- In the list of tasks, select 10. Active Directory Sync.
- In the Next Run field, select the date for the next synchronization.
- In the First run starts at field, select the time of day at which the synchronizations should start running.
- In the Frequency field, select the frequency with which the synchronization should take place.
- Click Additional Parameters.
- On the Task Parameters window:
- Select Enable Active Directory Sync. To temporarily disable this task, it is possible to clear this checkbox without the need to clean out the other fields.
- In the Active Directory Login field, enter the Windows login name of a user with access to the LDAP server.
- In the Active Directory Password field,, enter the password of the user with access to the LDAP server.
- In the Server Name field, enter the name of the LDAP server with which the synchronization should take place.
- In the LDAP Root Container field, enter the container within LDAP that contains the sub tree of users and user groups relevant to PPM. The container is specified using LDAP syntax such as cn=container,dc=domain,dc=com. Any object can be specified in this field using this syntax.
- In the Login field, enter the PPM login name of a user with administrative rights to PPM.
- In the Password field,enter the PPM password of this user.
- In the Ignore PPM Users field,enter a list of PPM login names, separated by semicolons, that will not be synchronized with LDAP. By default, the login name of the PPM System Administrator, “admin”, is listed here, to avoid causing this user to become disabled upon running a LDAP synchronization.
- In the Ignore PPM Groups field,enter a list of PPM group names, separated by semicolons, that will not be synchronized with LDAP. By default, the group name “Administrators” is listed here to avoid causing this group to either get deleted or contain the names of (Windows) Administrators as defined in LDAP.
- In the License Class field, enter the type of license that should be assigned to new users.
- When all fields have been defined as required, click OK to accept the entered values and close the Task Parameters window.
- On the Schedule Tasks window, click OK to accept all entered values and schedule the LDAP synchronization task as specified.
- Restart PPM for the changes to take effect.