LDAP Requirements

Up to 10,000 contacts can be synced (500 at a time).

You must meet the following requirements:

  • An LDAP server running on the LAN. The IP doesn't have to be the domain controller, just one the Autotask service can make calls to.
  • An SSL certificate (installed on the LDAP server making the call to the Autotask server)
  • You must configure port 636 to allow Autotask servers to make LDAPS calls into your LDAP server. Refer to Setting up Active Directory sync for an organization in Autotask.
  • For this, you will need to add certain Autotask IP addresses to your allowlist. Refer to Allowlisting IP addresses.
  • The Active Directory user account can be a normal user account and doesn't require any special elevated rights to run queries against Active Directory.

NOTE  Every environment is different. If you have some strict security policies in place, you may need to adjust your permissions to allow the user account to query Active Directory using LDAP commands.

If you know the name of the data center that hosts your Autotask instance, you only need to add its address range to your allowlist.