Skip Navigation

Connect to a
Microsoft Active Directory

  1. In the
    Connection name
    field, type a name for this company directory connection.
    If you have a
    Microsoft Azure
    directory configured, this connection name must be different than the name of the
    Azure
    directory connection. You cannot change the name after you save the configuration.
  2. In the
    Username
    field, type the username of the
    Microsoft Active Directory
    account.
  3. In the
    Domain
    field, type the FQDN of the domain that hosts
    Microsoft Active Directory
    . For example, domain.example.com.
  4. In the
    Password
    field, type the password of the
    Microsoft Active Directory
    account.
  5. In the
    Domain controller discovery
    drop-down list, click one of the following:
    • If you want to use automatic discovery, click
      Automatic
      .
    • If you want to specify the domain controller computer, click
      Select from list below
      . Click The Add icon and type the FQDN of the computer. Repeat this step to add more computers.
  6. In the
    Global catalog search base
    field, type the search base that you want to access (for example, OU=Users,DC=example,DC=com). To search the entire Global Catalog, leave the field blank.
  7. In the
    Global catalog discovery
    drop-down list, click one of the following: .
    • If you want to use automatic catalog discovery, click
      Automatic
      .
    • If you want to specify the catalog computer, click
      Select from list below
      . Click The Add icon and type the FQDN of the computer. If necessary, repeat this step to specify more computers
  8. If you want to enable support for linked
    Microsoft Exchange
    mailboxes, in the
    Support for linked Microsoft Exchange mailboxes
    drop-down list, click
    Yes
    . To configure the
    Microsoft Active Directory
    account for each forest that you want
    BlackBerry UEM Cloud
    to access, in the
    List of account forests
    section, click The Add icon . Specify the forest name, user domain name (the user can belong to any domain in the account forest), username, and password.
  9. To synchronize more user details from your company directory, select the
    Synchronize additional user details
    check box. The additional details include company name and office phone.
  10. Click
    Save
    .
If you want to add a directory synchronization schedule, see Configure directory synchronization schedules.