To Enable Active Directory Integration

To integrate you MYOB Advanced instance with Active Directory (AD) you should first enable integration in MYOB Advanced, as described in this topic. For a description of all steps required for integration with AD, see Integration with Active Directory.

To Enable Active Directory Integration

1. Create an AD user account that has Read permissions throughout the entire AD forest.

   This user account must be included in the Domain Users group or have at least Read permissions to the following properties defined in the AD schema: objectSid, distinguishedName, sAMAccountName, displayName, description, lastLogon, pwdLastSet, primaryGroupID, and memberOf.

2. Modify the web.config file as follows:
   1. Open the web.config file, which is located in the folder that contains the application instance website.
      Important: When you save changes to the web.config file, the website is automatically restarted. Make sure that all users are warned about the restart so that they can save their documents in advance.
   2. In the file, find the activeDirectory section within the px.core section and edit it similarly to the example shown below.

      <activeDirectory
                     enabled="true"
                     path="Domain_Path"
                     dc="Domain_Name"
                     user="User_Name"
                     password="User_Password" />

      In the code shown above:
      • Domain_Path is the DNS name or the IP address of the domain controller (DC).
      • Domain_Name is the domain name, such as terra, terra.com, or sing.terra.com. This setting affects the visibility of the data of MYOB Advanced to the domain users.

        Preferably, you should use the highest-level domain of the domain name. For example, in the sing.terra.com domain name, the highest level domain is sing, and you would have to specify dc="sing". For the terra.net domain, the highest level domain is terra and you would have to specify dc="terra".

      • User_Name is the name of the user account you created in Step 1. Depending on the AD settings, you should use one of the following formats: User_Name, User_Name@Domain_Name, or Domain_Name\User_Name.
      • User_Password is the AD password of the user account you created in Step 1.
   3. Save the web.config file. The website restarts automatically.

After you have enabled integration with Active Directory, you need to map AD groups to MYOB Advanced roles, as described in To Map Active Directory Groups to Roles in MYOB Advanced.