How to integrate Active Directory on-premises with DocuWare Cloud User Provisioning

Prev Next

If your organization uses Active Directory or LDAP directory to manage employee access to tools and services, you can utilize On-premises UserProvisioning feature to automatically provide your users with access to DocuWare via SCIM. This guide will walk you through the steps to configure both DocuWare User Provisioning plugin and user provisioning directory connector application to set up provisioning for your organization.

The current version of UserSync (v3) supports the following provisioning features:

  • Automatic User Creation: Users assigned to either the synchronized groups or organizational unit are automatically created as users in DocuWare.

  • Attribute Synchronization: Any updates to user attributes (userName, email, activeness, firstname, lastname) in Active Directory will be reflected in DocuWare.

  • User Deactivation: When users are deactivated in the directory, they are marked as 'disabled' in DocuWare, preventing them from logging in.

  • Group Creation/Update: Groups that are configured to be synchronized will be automatically created and updated if a change in the group memberships is detected.

Configuring DocuWare:

  1. Go to DocuWare Configurations > General > User Provisioning.

  2. In the User Provisioning plugin, activate the option Enable User Provisioning.

  3. In the Identity Provider dropdown select "On-premise".

  4. In the dropdown Application Registration select previously created app registration or click Create Application Registration.

  1. Write the Application Name.

  1. From the just created app registration copy the values of

    1. Application (Client) ID

    2. Client Secret

  1. Click the Done button.

  2. After saving, copy the following values:

    1. User Provisioning tenant URL

    2. Token endpoint URL

  1. All information needed from Configuration page:

  • The Application (Client) ID

  • The Client Secret

  • User Provisioning tenant URL

  • Token endpoint URL

  1. Download the User Provisioning connector tool and click Save.

Configuring User Provisioning Configurator application:

  1. Download the User Provisioning directory connector tool.

  2. Open Docuware.userSyncOnPrem.zip.

  3. Open UserProvisioningConfigurator folder and click UserProvisioningConfigurator.exe.

  4. Once opened, click on the Create Configuration File button to create a configuration.

  1. New screen with radio buttons appears. Select DocuWare Cloud and click Continue.

  1. New screen with textboxes appears. All details for connecting to DocuWare should be pasted there. The needed information should be copied from the UserProvisioning plugin in Configuration page (Step 9 from Configuring DocuWare section).
    After pasting the details, optionally click on Test Connection button to validate the configuration.

  1. Click Add Configuration to start entering information about the Directories you'd like to connect.

  1. When you start editing the configuration you will see a tab menu with different settings. By default all options in the General tab are set to true.

  1. Click Connection tab and choose - LDAP or Microsoft.

  • Add needed information.

  • BaseDN and Groups DN should follow the syntax:

    • Groups DN examples: cn=Admins,dc=example,dc=com or cn=Developers,ou=IT,dc=company,dc=org

    • BaseDN examples: dc=example,dc=com or ou=IT,dc=company,dc=org

  1. Objects and Mappings tabs are pre-filled with required data based on the selected AD type.

  2. You can test the configuration clicking on Test Configuration button.

  1. Click on Groups tab and then on Connect to AD button.

You will see a list of available groups, from which you can select the ones that need to be provisioned.

You can test the configuration once again when the groups are selected.

Once the configuration is saved it will appear in the Provisioning connection view. Each configuration can be updated or deleted.

To create multiple connections to various servers and active directories, a separate configuration should be created for each one.

  1. Once you have filled in the provisioning connection data and created at least one valid configuration, you can save the provisioning file by clicking Save.

  2. Close the User Provisioning Configurator application. Your configuration is already saved and can be found in the following folder: C:\ProgramData\DocuWare\UserProvisioningConfig

  3. Now create and schedule a Windows task for executing the User and Groups Synchronization.

  4. Open Windows Task Scheduler and click Create Basic Task.

  1. Follow the steps shown in the wizard. Enter a name for the task.

  1. Choose when the synchronization should be triggered.

  1. Select an Action.

  1. Now select the task you'd like to be executed and the arguments (configurations) which have to be used.

    For Program/Script - browse again to DocuWare\PowerTools\UserProvisioning\UserSyncExe and select UserProvisioning.exe.

  1. For Argument write the name of the file copied from the Windows Application (userProvisioning_config_1.json).

  1. Click Finish and wait for synchronization.

  2. Once the synchronization is finished the following information will appear in the User Provisioning Configurator:

  1. If there are failed users or groups the Timestamp field can be edited with previous date so the synchronization task can run again.

  2. Logs can be found here: C:\ProgramData\DocuWare\UserProvisioningConfig

Supported versions: DocuWare Cloud + 7.14