If the API key associated with the 探花大神 administrator account used to configure the 探花大神 Active Directory Integration (ADI) AD Import agent is rotated, or the admin account used to configure ADI is deleted, the AD Import service will stop working. As a result, password changes, new user imports, and user updates from AD to 探花大神 will fail.
Your organization will not receive any sort of communication or error about the breakage.
Read this article to learn how to verify the status of AD Import agents in 探花大神 and update the API Key on impacted AD servers.
Verifying AD Import Agent Status
- Log in to the .
- Navigate to DIRECTORY INTEGRATIONS > Active Directory > select your Domain > Domain Agents tab.
- In the Agent Version column, if Import is listed with a red 鈥!鈥, the import agent is broken and the API key needs to be updated.
Updating the API Key
Overview
The following is a high level overview of the steps required to replace the API key for AD Import:
- Log in to the and view the Import agent(s) within Domain Agents tab.
- Identify each broken connector.
- Retrieve the API key you stored for the ADI admin account.
We recommend using a dedicated administrator account specific to ADI.
- On each impacted AD server:
- Log in to the server with a local admin or AD domain admin account.
- Replace the default value for HKLM\SOFTWARE\探花大神\AD Integration Import Agent\api_key in the registry.
- Restart the 探花大神 AD Integration Import Agent service.
- In the 探花大神 Admin Portal, view the Import agents(s) within the Domain Agents tab and verify they are active.
To update the API Key on an AD server
- Generate a new API key if the 探花大神 admin account you are using for ADI does not have an API key or the generated API key was not stored.
Store the API key in a secure location, like the 探花大神 Password Manager.
- Log in to the AD server as a local administrator or AD domain administrator.
The server can be identified by referencing the Host Name in the 探花大神 Admin Portal.
- Open the registry.
- Navigate to HKLM\SOFTWARE\探花大神\AD Integration Import Agent\api_key.
- Edit Default.
- Enter the API key in the Value data field, replacing the existing hashed value.
- Click OK.
- Open services.msc and restart the 探花大神 AD Integration Import Agent service.
- Log in to the .
- Navigate to DIRECTORY INTEGRATIONS > Active Directory > select your Domain > Domain Agents.
- Verify the Import agent has a green check mark "鉁" indicating it is active.