Skip to main content

Data store integrations

For user authentication, the SecureAuth® Identity Platform integrates with data stores (directories and databases) in your organization.

As an administrator, you define the data stores and directories from which to pull user data. User profiles remain in your data store and are never saved in the Identity Platform. This keeps data in your control with no duplicate content to manage elsewhere.

The following table lists the supported directory integrations in the New Experience for Identity Platform release 23.07 or later.

Cloud deployment

Hybrid/On-Prem deployment

AD LDS **

AD LDS

ASP.NET **

ASP.NET

Active Directory (AD) **

Active Directory (AD)

Generic LDAP **

Generic LDAP

Microsoft Entra ID (formerly Azure AD)

Microsoft Entra ID (formerly Azure AD)

NetIQ eDirectory **

NetIQ eDirectory

Oracle DB **

Oracle DB

SQL Server **

SQL Server

** Denotes that the SecureAuth Connector is required to communicate with the data store.

When you add a data store and its mapping properties, the data store connection information is collectively saved as an object. This data store object is then associated with any number of policies and applications in the Identity Platform. This means you can associate multiple data stores with a single post authentication resource.

To see a list of profile field mapping properties and which profile properties are generated and stored in the SecureAuth cloud, see List of stored profile field properties.

Note

A data store added to the Identity Platform in the New Experience cannot be edited in the Advanced Settings.

Prerequisites

  • SecureAuth® Identity Platform release 23.07 or later

  • Data store supported in the New Experience for cloud or hybrid deployments

  • Service account set up for the Identity Platform to access the data store. The service account must be granted read privileges and optional write privileges to update user information.

  • For Identity Platform cloud deployments, the SecureAuth Connector must be installed to establish communication between the data store on a local server in your organization and the Identity Platform

Note

To migrate from SecureAuth IdP (on-prem) version 9.3 with an existing AD data store configured using the New Experience to the Identity Platform (cloud), you will need to reenter the data store credentials after downloading and installing the SecureAuth Connector.

Next steps

Add a data store. Some data stores in cloud deployments, require you to first install the SecureAuth Connector.SecureAuth Connector installation