Data store integration overview

For user authentication, the SecureAuth® Identity Platform integrates with data stores (directories and databases) in your organization.

As an administrator, you define the data stores and directories from which to pull user data. User profiles remain in your data store and are never saved in the Identity Platform. This keeps data in your control with no duplicate content to manage elsewhere.

The following table lists the supported directory integrations in the New Experience user interface. The table includes more data stores added in the Identity Platform version 20.06.

Cloud deployment

Hybrid deployment

Active Directory (AD) **

Active Directory (AD)

Azure AD

Generic LDAP

Generic LDAP **

NetIQ eDirectory

SQL Server **

SQL Server

Oracle DB **

** Denotes that the SecureAuth Connector is required to communicate with the data store.

When you add a data store and its mapping properties, the data store connection information is collectively saved as an object. This data store object is then associated with any number of policies and applications in the Identity Platform. This means you can associate multiple data stores with a single post authentication resource.

To see a list of profile field mapping properties and which profile properties are generated and stored in the SecureAuth cloud, see List of stored profile field properties.

Note

A data store added to the Identity Platform in the New Experience UI cannot be edited in the Classic Experience.

Prerequisites

  • SecureAuth® Identity Platform version 19.07 or later

  • Data store supported in the New Experience UI for cloud and hybrid deployments

  • Service account set up for the Identity Platform to access the data store. The service account must be granted read privileges and optional write privileges to update user information.

  • For Identity Platform cloud deployments, the SecureAuth Connector must be installed to establish communication between the data store on a local server in your organization and the Identity Platform

Note

To migrate from SecureAuth IdP (on-prem) version 9.3 with an existing AD data store configured using the New Experience UI to the Identity Platform (cloud), you will need to reenter the data store credentials after downloading and installing the SecureAuth Connector.

 

Next steps

For cloud deployments, first install the SecureAuth Connector. Then, for cloud or hybrid deployments, add a data store.