Cisco
Login
Search
Software Secure Access
Activity Manage

Cisco Secure Access Help Provision Users, Groups, and Endpoint Devices from Active Directory Manage AD Connectors Deploy LDIF Files for AD Connector Procedure Step 3 – Deploy the LDIF Source Files

Last updated: Aug 22, 2025

Step 3 – Deploy the LDIF Source Files

Deploy the LDIF source files on your server. For more information, see Best Practices for LDIF Source Deployments and Requirements.

  1. Navigate to the C:\ drive on your server.
  2. Generate the LDIF files for the users and groups in your organization, and zip the files into a file. Name the file Cisco-AD-Connector-LDIF.zip.
    • Base-64 encode the value of the objectGUID fields.
    • Use two colons (::) to separate the objectGUID fields.
    • For users, create an UserStruct.ldif file. The supported fields are:
      • dn, objectGUID, sAMAccountName, userPrincipalName, memberOf, and primaryGroupID.
    • For groups, create a GroupStruct.ldif file. The supported fields are:
      • dn, objectGUID, sAMAccountName, userPrincipalName, memberOf, and primaryGroupToken.
  3. Once you create the ZIP file, the AD Connector automatically syncs the users and groups with Secure Access. Syncs occur every five minutes.
Previous topic Step 2 – Install the Cisco AD Connector Next topic Troubleshooting