Home
Administrator Guides
Administrator's Guide
Administrator Guide
Integration between HCL Unica and Windows Active Directory
Unica Platform can be configured to integrate with Windows™ Active Directory server or another LDAP (Lightweight Directory Access Protocol) server. By integrating Unica with a directory server, you can maintain users and groups in one centralized location. Integration provides a flexible model for extending the enterprise authorization policies into Unica applications. Integration reduces support costs and the time needed to deploy an application in production.
Configuration process roadmap: Active Directory integration
Use this configuration process roadmap to scan the tasks required to integrate Unica with Windows™ Active Directory. The Topic column provides links to the topics that describe the tasks in detail.
Setting up an Active Directory user with PlatformAdminRole permissions
When NTLMv2 authentication is enabled, you can not log in to Unica as platform_admin, so you must perform the following procedure in order to have administrator access to Unica Platform.

Administrator Guides
- Administrator's Guide
  - Administrator Guide
    - Unica Platform features
      Unica Platform provides security, configuration, notification, and dashboard features for Unica products.
    - Licensing - overview
    - HCL Unica user account management
      You can manage the attributes of user accounts created using Unica Platform user interface, which we refer to as internal accounts. This is in contrast to external user accounts, which are imported from an external system such as an LDAP server or web access control system.
    - Security management
      Unica Platform supports roles and permissions to control user access to objects and features in Unica applications.
    - Configuration management
      When Unica is first installed, the Configuration page shows only the properties used to configure Unica Platform and some global configuration properties. When you install additional Unica applications, the properties used to configure these applications are registered with Unica Platform. These properties are then shown on the Configuration page, where you can set or modify their values.
    - Dashboard management
      Dashboards are configurable pages that contain information useful to groups of users who fill various roles within your company. The components that make up dashboards are called portlets. Dashboards can contain pre-defined portlets or portlets that you create.
    - The HCL Unica Scheduler
      The Unica Scheduler enables you to configure a process to run at intervals that you define.
    - SAML 2.0 based federated authentication
      Unica Platform implements a SAML 2.0 based Identity Provider (IdP) that enables a single sign-on federation among Unica products or between Unica products and third party applications.
    - SAML 2.0 single sign-on
      Unica Platform supports SAML 2.0 based single sign-on.
    - Single sign-on between HCL Unica and IBM Digital Analytics
      If your organization uses IBM Digital Analytics, you can enable single sign-on between Digital Analytics and Unica.
    - Integration between HCL Unica and Windows Active Directory
      Unica Platform can be configured to integrate with Windows™ Active Directory server or another LDAP (Lightweight Directory Access Protocol) server. By integrating Unica with a directory server, you can maintain users and groups in one centralized location. Integration provides a flexible model for extending the enterprise authorization policies into Unica applications. Integration reduces support costs and the time needed to deploy an application in production.
      - Active Directory integration features
        Unica Platform integration with Windows™ Active Directory provides the features described in this section.
      - Active Directory integration prerequisites
        To take advantage of the Windows™ Active Directory integration features, Unica applications must be installed on a supported operating system.
      - Configuration process roadmap: Active Directory integration
        Use this configuration process roadmap to scan the tasks required to integrate Unica with Windows™ Active Directory. The Topic column provides links to the topics that describe the tasks in detail.
        Obtaining required information
        Obtain the required information about the directory server with which you want to integrate. You use this information during the configuration process, to store directory server credentials and to set configuration property values.
        Group membership, mapping, and application access
        When you plan how to map your directory server groups to Unica Platform groups, follow the guidelines described here.
        Storing directory server credentials in Unica Platform
        If your directory server does not allow anonymous access, you must configure an Unica user account to hold the user name and password of a directory server user, as described in the following procedure.
        Setting LDAP login method connection properties in HCL Unica
        LDAP login method properties specify connection details the system uses to connect to the directory server.
        Setting LDAP synchronization properties
        LDAP synchronization properties specify details that the system uses to log into the directory server and identify users to import. Some of these properties also control the frequency and other details of the automatic synchronization process.
        Setting user attributes map properties
        These properties specify the user attributes that the system imports from the directory server.
        Mapping LDAP groups to HCL Unica groups
        Users who belong to the directory server groups you map here are imported and made members of the Unica Platform group or groups specified here.
        Testing synchronization
        Verify that users and groups are correctly synchronized between your servers.
        Setting up an Active Directory user with PlatformAdminRole permissions
        When NTLMv2 authentication is enabled, you can not log in to Unica as platform_admin, so you must perform the following procedure in order to have administrator access to Unica Platform.
        Setting the security mode to enable NTLMv2 authentication
        Only if you want to enable NTLMv2 authentication, set configuration properties as described in this procedure.
        Restarting the web application server
        Restart the web application server to ensure that all of your configuration changes are applied.
        Testing login as an Active Directory user
        Verify the configuration by logging in to Unica with an appropriate Windows™ Active Directory user account.
    - Integration between HCL Unica and LDAP servers
      Unica Platform can be configured to integrate with Windows™ Active Directory server or another LDAP (Lightweight Directory Access Protocol) server. By integrating Unica with a directory server, you can maintain users and groups in one centralized location. Integration provides a flexible model for extending the enterprise authorization policies into Unica applications. Integration reduces support costs and the time needed to deploy an application in production.
    - Integration with web access control platforms
      Organizations use web access control platforms to consolidate their security systems, which provide a portal that regulates user access to web sites. This section provides an overview of Unica integration with web access control platforms.
    - Alert and notification management
      Unica Platform provides support for system alerts and user notifications sent by Unica products.
    - Implementation of one-way SSL
      This section describes one-way SSL in Unica.
    - Security framework for HCL Unica APIs
      Unica Platform provides the security framework for the APIs implemented by Unica products.
    - Data filter creation and management
      Data filters make it possible to restrict the customer data that an Unica user can view and work with in Unica applications. You can think of the data you secure with a data filter as a data set defined by the fields in your customer tables that you specify.
    - Audit event tracking in HCL Unica
      You can configure which audit events are tracked and assign a severity level to each tracked event.
    - The Unica Platform system log
      You should check the system log first if the Unica Platform application malfunctions. The system log is independent of the security audit information, which is stored in the system tables. While the system log tracks some of the same information contained in the security audit reports, it also contains information useful in troubleshooting Unica Platform.
    - Unica Platform utilities
      This section provides an overview of the Unica Platform utilities, including some details that apply to all the utilities and which are not included in the individual utility descriptions.
    - Unica Platform SQL scripts
      This section describes the SQL scripts provided with Unica Platform to perform various tasks relating to the Unica Platform system tables.
    - HCL Unica configuration properties
      This section describes the configuration properties found on the Settings & Configuration page.
    - Customization of stylesheets and images in the HCL Unica user interface
      You can customize the appearance of the user interface where most Unica product pages appear. By editing a cascading style sheet and providing your own graphics, you can change many of the images, fonts, and colors in the user interface.
- Configuration Properties Guide
- System Tables

Setting up an Active Directory user with PlatformAdminRole permissions

When NTLMv2 authentication is enabled, you can not log in to Unica as platform_admin, so you must perform the following procedure in order to have administrator access to Unica Platform.

Procedure

Log in to Unica as an internal user (a user created in Unica Platform rather than a user imported from Active Directory). This must be a user with PlatformAdminRole permissions in the Unica Platform.
Create a Unica Platform group and assign the PlatformAdminRole role to it.
Ensure that at least one Windows™ Active Directory user is a member of this group.

Have feedback?
Google Analytics is used to store comments and ratings. To provide a comment or rating for a topic, click Accept All Cookies or Allow All in Cookie Preferences in the footer of this page.