Data store integrations
For user authentication, the SecureAuth® Identity Platform integrates with data stores (directories and databases) in your organization.
As an administrator, you define the data stores and directories from which to pull user data. User profiles remain in your data store and are never saved in the Identity Platform. This keeps data in your control with no duplicate content to manage elsewhere.
The following table lists the supported directory integrations in the New Experience user interface. The table includes more data stores added in the Identity Platform version 20.06.
Cloud deployment | Hybrid deployment |
|---|---|
Active Directory (AD) ** | Active Directory (AD) |
Azure AD | Generic LDAP |
Generic LDAP ** | NetIQ eDirectory |
SQL Server ** | SQL Server |
Oracle DB ** |
** Denotes that the SecureAuth Connector is required to communicate with the data store.
When you add a data store and its mapping properties, the data store connection information is collectively saved as an object. This data store object is then associated with any number of policies and applications in the Identity Platform. This means you can associate multiple data stores with a single post authentication resource.
To see a list of profile field mapping properties and which profile properties are generated and stored in the SecureAuth cloud, see List of stored profile field properties.
Note
A data store added to the Identity Platform in the New Experience cannot be edited in the Classic Experience.
Prerequisites
SecureAuth® Identity Platform release 19.07 or later
Data store supported in the New Experience for cloud and hybrid deployments
Service account set up for the Identity Platform to access the data store. The service account must be granted read privileges and optional write privileges to update user information.
For Identity Platform cloud deployments, the SecureAuth Connector must be installed to establish communication between the data store on a local server in your organization and the Identity Platform
Note
To migrate from SecureAuth IdP (on-prem) version 9.3 with an existing AD data store configured using the New Experience to the Identity Platform (cloud), you will need to reenter the data store credentials after downloading and installing the SecureAuth Connector.
Next steps
For cloud deployments, first install the SecureAuth Connector. Then, for cloud or hybrid deployments, add a data store.