Auto-enrolling users by importing data from external databases

Using this option, you can connect databases such as Oracle, MS SQL, MySQL, and PostgreSQL to ADSelfService Plus and import the enrollment data stored in them. This option is useful if you already have the necessary enrollment data available in an external database.

Before importing the data, ensure that the required authenticators are configured under the required policies.

To learn how to set up the authenticators supported by ADSelfService Plus, click here.

Import data formats

The imported data must follow the specified formats for each authenticator, as detailed in the table below.

Note: The database header names listed are samples. You are not required to use the exact same names. sAMAccountName is mandatory and must be a valid username present in AD.

Authenticator	Database header names	Allowed formats
Security Questions and Answers	question	It must be a security question. Eg., What is your favourite colour?
	answer	It must be the corresponding answer to the security question. Eg., Yellow.
AD Security Questions	answer	It must be the corresponding answer to the security question. Eg., Yellow.
SMS Verification	mobile	It must contain numbers 0 through 9.
Email Verification	mail	It must be a valid email address
Duo Security	sAMAccountName	It must be a valid user in AD.
Google Authenticator	googleauth secret key	It must contain letters "A-Z" or "a-z" and numbers "2-7".
Microsoft Authenticator	microsoftauth secret key	It must contain letters "A-Z" or "a-z" and numbers "0-9".
Zoho OneAuth TOTP	zohooneauth secret key	It must contain letters "A-Z" or "a-z" and numbers "0-9".
Custom TOTP – Software token	customtotp secret key	It must contain letters "A-Z" or "a-z" and numbers "0-9".
Custom TOTP – Hardware token	customtotp hardware serial number	It must contain letters "A-Z" or "a-z" and numbers "0-9".
	customtotp secret key	It must contain letters "A-Z" or "a-z" and numbers "0-9".

Steps for establishing a connection with the external database  

1. Log in to the ADSelfService Plus web console as an admin.
2. Navigate to  Configuration > Administrative Tools >; Quick Enrollment >; Import Enrollment Data from External Database.
3. Click Add New Data Source.
4. Enter a  Connection Name for the data source.
5. Select the type of database that you want to connect to from the Select DB Server drop-down.
6. Enter the  Host Name/IP Address and  Port number of the database server.
7. Enter the name of the database that stores your enrollment data in the DB Name field.
8. In the Username and Password fields, enter the credentials of a user who has privileges to query the database server.
9. Click Create.

Steps for importing data from the connected database

1. Back on the Import Enrollment Data from External Database screen, click Add New Fetcher.
2. Enter a name in the Fetcher Name field.
3. Select the connection that you just created from the Select the Connection drop-down.
4. Select a policy from the Select Policy drop-down. If you are importing local users (users who are not part of AD who have accounts on specific machines) from the database, select localusers.domain as the policy.
5. Select the enrollment data that you want to import from the Import drop-down.
6. In the SQL Query field, type the appropriate query to fetch the necessary data from the database table. For example, if you have configured Security Question & Answer and Hardware Token and wish to import the data for these authenticators, the following is the sample query that needs to be entered.

Sample query: Select UserName, Question, Answer, CustomTOTPSecretKey, CustomTOTPHardwareSerialNumber from TableName;

Important note: Ensure the selected authenticators match the order of columns in your SQL query.
7. Click Save.

Methods to import user enrollment data

• Manually: If new domain users need to be added to the database, click the Fetch Again icon to enroll them.
• Automatically: Set up a scheduler to automatically update the enrollment data for new domain users at regular intervals.

You can also import and enroll local users through a CSV file. Learn how.