I have been involved recently in installing ECTS for a DoD program, and while doing so I have been trying to keep track of the issues and adaptations I have had to make to get ECTS working(deploying, issues, enhancing). This is the fourth in the series in which I have been working on configuring MOSS to import the user information from the Active Directory and Active Directory Application Mode Instance being used by the "internal" and "external", respectively, MOSS sites.

I have found that there are not many locations that provide a clear method of setting up your Shared Services Provider to successfully import ADAM account properties into MOSS, so here is a quick Setup for all. Please remember that this ADAM instance was created by the ECTS installation so some of my settings, User Attribute, may differ from your configuration depended on how/what created your ADAM instance.

Central Admin

1. Click on the Shared Service Provider (SharedServices1, SSP1, etc.)
2. Click on User Profile and Properties
3. Click on View import connections
4. Click on Create New Connection
5. On the Add Connection Page use the following settings
   1. Connection Settings
      1. Type: LDAP Directory
      2. Connection Name: <you pick; I recommend something like ADAM>
      3. Directory service server name: <Name of the server where the ADAM instance is running>
      4. Port: <Port number where ADAM is running>
         1. Uncheck Use SSL-secured connection
      5. Time out: <default is fine>
      6. Provider Name: <The name of the MembershipProvider in your web.config. ADAMUser>
         1. There are some blogs that state you cannot use the ActiveDirectoryMembershipProvider Membership Provider, but this is incorrect. The ASP.NET ActiveDirectoryMembershipProvider is capable of being used.
      7. Username Attribute: userPrincipalName
   2. Search Settings
      1. Click the Auto Fill Root Search Base
         1. You should have something like CN=ExternalUsers,DC=…,...
      2. User Filter: (&(objectCategory=Person)(objectClass=User))
      3. Scope: Subtree
      4. Page size: <default is fine>
      5. Page time out: <default is fine>
   3. Authentication Information
      1. Select User Default Account
   4. Click OK

         

   Your ADAM connection should now be added to the list of connections available for User Profile Import in your Shared Service Provider. You can now run a full import to get the users from ADAM. You will notice all ADAM user accounts are prefaced with adam:, assuming you are using the ADAM instance from ECTS.