Skip to main content

Enable Active Directory User Discovery and Add Attribute Extensions

App Portal / App Broker 2024 R1

App Portal / App Broker collects data from discovery in your deployment system. Active Directory User Discovery must be enabled in System Center Configuration Manager, Altiris Client Management Suite, Jamf Cloud, and /or Jamf Pro for App Portal / App Broker to function properly.

Additional Active Directory user discovery extensions are also required. There are twelve (12) attribute extensions that App Portal / App Broker relies on. It is necessary to inventory the additional Active Directory attributes and have them present in your deployment system before you start the user/device sync process in App Portal / App Broker.

warning

The user discoverable attribute displayName is required to be extended in System Center Configuration Manager and/or Altiris Client Management Suite. This needs to be done before the starting the user/device sync process in App Portal / App Broker or the process will fail.

To add Active Directory user discovery attribute extensions, perform the following steps.

To add Active Directory user discovery attribute extensions:

  1. Confirm that at least one account in the domain being inventoried has the following Active Directory attributes populated:
    • DisplayName
Email Address
Department
Title
Full User Name
User Name
Last Name
First Name
Office
Manager
Company
City
Postal Code
  1. Once confirmed, open the Active Directory User Discovery method in the System Center Configuration Manager Console and/or Altiris Management Console and include the following attributes in addition to the existing ones:
displayName
mail
department
title
sn
givenName
physicalDeliveryOfficeName
distinguishedName
manager
company
l (lower case L) (Only enter the letter l!)
postalCode
info

This is only required if you are using standard discovery from System Center Configuration Manager or Altiris. If you are providing a custom SQL script to perform user and computer discovery, these steps are not required.

  1. Initiate a discovery, and once the discovery process is complete, verify that a user account in the All Users collection has the additional attributes listed above.