ML Work Orders™ Active Directory Integration

 

IMPORTANT! Because of the technical knowledge required, your district’s IT administrator (or someone with a similar role) will most likely need to perform the first two procedures.

ML Work Orders™ Software gives subscribers the option to import Active Directory users to automatically create user accounts inside ML Work Orders. Once the new account is created, the software then communicates directly with Active Directory to authenticate the user’s login request.

 

There are (3) simple one-time procedures that must be performed to integrate your district’s Active Directory users with ML Work Orders™ Software:

 

1. Setup Active Directory integration with ML Work Orders™ Software, and;

2. Import Active Directory users into ML Work Orders™ Software.

IMPORTANT! Because of the technical knowledge required, your district’s IT administrator (or someone with a similar role) will most likely need to perform the first two procedures.

 

Set up Active Directory Integration

 

To set up Active Directory integration from any screen after logging into your ML Work Orders™ Software account using District Admin credentials:

 

1. Grant the MasterLibrary™ Software server access to your Active Directory server by opening port 636, then allowing the following IP Addresses. 

 

• 20.44.84.177 (Legacy IP prior to 4/1/23)
• 20.96.235.248/29 (Additional IP after 4/1/23)
• 20.221.121.48/29 (Additional IP after 4/1/23)
• 20.125.75.224/29 (Additional IP after 4/1/23)

 

 

Your IT Administrator can contact your ML Work Orders™ Software support representative for detailed instructions.

 

 2. Select Settings > Single Sign On > Active Directory Connection from the menu.

 

The Active Directory Integration Admin screen will be displayed:

 

 

3. Enter your district’s server address (or IP) into the Active Directory Server field.

 

4. Optional: Select the Secure LDAP checkbox if your district wants to use LDAP over a Secure Socket Layer (SSL) for user authentication.

 

Important! If the Secure LDAP checkbox is selected, a certificate (.cer) file will need to be emailed to info@masterlibrary.com so that MasterLibrary Software can connect to your district’s Active Directory server.  Until that certificate is provided and installed on the MasterLibrary server, you will not be able to proceed with this configuration.

 

Before your district’s connection settings can be saved, the connection must be tested to verify that the server exists and is connectable.

 

5. Enter any district Active Directory username and password in the corresponding fields.

 

 

6.  Check the Store Credentials box to store your credentials for the automatic Active Directory synchronization.

 

NOTE: You have the option to save filters and run a nightly sync to Active Directory to update any user changes.

 

7. Select the Test Connection button.

 

Connection test successful will be displayed in the Test Connection field if the connection can be made.

 

8. Select the Save button to save your connection settings.

 

Note: If you use ML Schedules you can transfer the same credentials over from the other program.

 

This can be done by clicking "Transfer AD credentials from MLS"

 

 

---

 

Import Active Directory Users

 

To import your district’s Active Directory users after logging into your ML Work Orders™ Software account using District Admin credentials:

 

1. Select Settings > Single Sign On > Active Directory Filters

 

2. To add a Filter click the add icon ()

 

The Manage Active Directory Filter screen will be displayed:

 

3. Enter a name for the filter in the Name field.

 

4. Enter an LDAP filter string in the Filter field.

 

LDAP Filter Example:
OU=Staff,OU=TestSD,DC=testsd,DC=sdserver,DC=local

 

The example string tells the Active Directory Import where to pull the users that should be created in the district’s MasterLibrary Software account. For example, if you only wanted teachers to be added, the filter would be set to only find district teachers.

Within the Active Directory database you can find the filter in any of the three highlighted areas.

5. Select if this is the name of a group. If so, check off Is a Group

6. Select if you would like the Filter to be an "Active" filter, that is used if running a nightly synchronization to Active Directory.

 

7. Select if the Roles you would like the users to have by default

 

8. Select the Buildings the users will have access to by default

 

9. Select a Request Type this will give every LDAP User the following roles listed above with the Request type selected 

 

10. Select the View Users () button to display a list of all users that can be imported into your school's MasterLibrary Software account. Any users which can be imported will display a green sync icon () Any users which can not be imported will display an attention icon (), with a reason as to why they can not be imported.

 

To manually sync the Active Directory filter in your MasterLibrary Software account, select the sync icon ()

 

11. To save the Active Directory filter, click the Save button.

 

12. Repeat Steps 1 -11  for any additional Active Directory filters you would like to add.

---

 

Schedule a Daily synchronization of Active Directory Users

 

To schedule a daily sync of all Active Directory users stored under an "Active" filter saved in MasterLibrary Software, you will:

 

1. Select Settings > Single Sign On > Active Directory Connection

 

2. Confirm your AD Username and AD Password are entered into the Username and Password Fields.

 

3. Check the Store Credentials check box and select the Save button.

 

4. Select Settings > Single Sign On > Active Directory Filters

 

5. Confirm you have the appropriate AD Filters listed.

 

6. Select the Schedule Daily Sync icon ().