Prerequisites

Before you configure LDAP user synchronization, you must do the following:

• Download the LDAP Sync Tool. You can do this from the FortiDLP Console's Admin settings (Users > LDAP) or the Next DLP Support Portal.
• Generate an API access token to enable LDAP directory syncs to be performed. You must do this from the FortiDLP Console's Admin settings (Users > LDAP). Make note of the token, as it will be required later during configuration.
• Organize your directory so that it contains the appropriate user groups or organizational units. This version of the LDAP Sync Tool will import all users in the Base DN matching the default LDAP filter (&(objectCategory=user)(objectSid=*)). This is configurable, as discussed in Creating the configuration file.
• Know your LDAP server's hostname or IP address, the LDAP or LDAPS port for communicating with that server, the authentication type you plan to use, and the directory search Base DN.
• Have the LDAPS or STARTTLS information and CA certificate for providing local network security if you plan to secure communications between the LDAP Sync Tool and your LDAP server.