How to integrate ADManager Plus with Boomi for efficient user life cycle management

How to integrate ADManager Plus with Boomi for efficient user life cycle management

Overview 

Boomi is an integration and automation platform that can help you instantly connect to applications, sync data, and automate processes such as employee onboarding. Integrating Boomi with ManageEngine ADManager Plus streamlines employee lifecycle management and automates tasks such as user onboarding, offboarding, and data syncing, ensuring consistency and efficiency. This integration also enhances permission and access management, ensuring that users' rights are consistent across enterprise applications.

 

Overall, this integration empowers organizations to sync data efficiently and eliminate manual data entry errors, enhancing overall business efficiency.

 

Here are some key highlights of this integration:

  • Multi-platform user provisioning: Automatically create user accounts across various platforms—such as AD, Exchange, Microsoft 365, and other enterprise applications with REST API support—when new employees are added.

  • A reduction in security risks caused by obsolete accounts: Automatically delete or disable user accounts, remove licenses across enterprise applications with REST API support, and even more each time a user record is deleted.

 

How to integrate ADManager Plus and Boomi 

ADManager Plus offers flexible endpoint configuration options to suit your organizational goals and needs. Two types of webhooksinbound and outbound webhooksdetermine how data can be synchronized between Boomi and ADManager Plus. This integration can be achieved by performing the following steps:
  1. Authorization configuration

Configure the authorization method to authorize API requests.

  1. Inbound webhook configuration

Configure endpoints to fetch user data from Boomi.

  1. Outbound webhook configuration

Configure an API to sync data between ADManager Plus and Boomi or to perform a task in Boomi. 


Pre-requisites 

Please ensure to provide an API key with permissions to retrieve desired information and perform tasks in Boomi. Refer to Boomi's API references for more details.

 Authorization configuration  

  1. Log in to ADManager Plus and navigate to the Automation tab.

  2. In the left pane, under Configuration, click Application Integrations.

  3. Under Enterprise Applications, click Boomi.

  4. Toggle the Enable Boomi Integration button on.

  5. In the Boomi Configuration page, click Authorization.

  6. Boomi uses API Key to authorize API requests. Perform the steps to generate the API key in Boomi, copy the key value for x-boomi-flow-api-key, and paste it in the Value field.

  7. Select Header from the Add To drop-down list.

  8. Click Configure.

 

Inbound webhook configuration 

Inbound webhook enables you to fetch users' data from Boomi to ADManager Plus. The pre-configured API allows you to import all the user from Boomi. However, if you would like to selectively import users, you can either modify the pre-configured endpoint, configure a new endpoint as per Boomi's API references, or use Advanced Filters in automation. The attribute mapping configured in this section can be selected as the data source while setting up an automation configuration. To configure an inbound webhook for Boomi:

  1. Under Inbound Webhook, click Boomi Endpoint Configuration.

  2. In the Endpoint Configuration tab, an endpoint (Boomi USERS ENDPOINT) comes pre-configured with an Endpoint URL, API Method, Headers, and Parameters fields to fetch user accounts from Boomi. If you would like to use this pre-configured endpoint, replace {Domain-Name} with the domain name of your Boomi instance in the Endpoint URL field. However, if you would like to use a new endpoint to import users, you can configure one using the + Add API endpoint button and filling in the required fields as per Boomi's API references. Click here to learn how to configure a new endpoint.
    Note:

    1. The API key value pair is pre-configured as a header for authenticating API requests as configured during Authorization Configuration.

    2. You can add macros to your endpoint URL to dynamically change it as per your requirement while fetching object-related data from the endpoint.

    3. Refer to Boomi's API references and configure additional headers and parameters, if required.

  1. Once done, click Test & Save. A response window will display all the requested parameters that can be fetched using the API call. Click Proceed.
    Note:

    1. Refer to Boomi's API references to know which Parameters must be configured to fetch only specific parameters.

    2. You can configure multiple endpoints for Boomi.

  1. Click Data Source - LDAP Attribute Mapping to match endpoints and to map AD LDAP attributes with the respective attributes in Boomi.

  2. Click + Add New Configuration and perform the following:

    • Enter the Configuration Name and Description and select the Automation Category from the drop-down menu.

    • In the Select Endpoint field, select the desired endpoint and a Primary Key that is unique to a user (e.g. employeeIdenifier).

Note: When multiple endpoints are configured, this attribute will be used to locate the identity across them and map their data.

    • In the Attribute Mapping field, select the attribute from the LDAP Attribute Name drop-down menu and map it with the respective column in Boomi.

Note: Click Format Mapping Attributes if you would like to create a new attribute format for the mapped attributes.

  1. Click Save.

 

Outbound webhook configuration 

Outbound webhook enables you to send changes made in AD to Boomi, fetch data from Boomi, and carry out tasks in Boomiall from ADManager Plus. The webhooks configured in this section can be included in Orchestration Templates, which in turn can be used during event-driven and scheduled automations. They can also be applied directly on desired users to perform a sequence of actions on them (Management > Advanced Management > Orchestration). To configure an outbound webhook for Boomi:

  1. Under Outbound Webhook, click Boomi Webhook Configuration.

  2. Click + Add Webhook.

  3. Enter a name and description for this webhook.

  4. Decide on the action that has to be performed and refer to Boomi's API references for API details such as URL, headers, parameters, and other requirements.

  5. Select from the drop-down menu the HTTP method that will enable you to perform the desired action on the endpoint.

  6. Enter the endpoint URL.

  7. Configure the Headers, Parameters, and Message Type in the appropriate format based on the API call that you would like to perform.

  8. Click Test and Save.

  9. A pop up window will then display a list of AD users and groups to test the configured API call. Select the desired AD user or group over which this API request has to be tested and click OK. This will make a real-time call to the endpoint URL and the selected objects will be modified as per the configuration.

  10. The webhook response and request details will then be displayed. Verify them for the expected API behavior and click Save.

 

Actions that can be automated in ADManager Plus 

Upon integration, administrators can configure automations to carry out the desired tasks. These automations can be monitored and controlled by implementing multi-level business workflows, which ensure that they are reviewed and approved before execution. The following are some sample actions that can be automated:

  • Create user accounts

  • Add users to groups

  • Modify user attributes

  • Remove users from groups

  • Modify user accounts by template

  • Create mailbox

  • Reset passwords

  • Disable or delete mailbox

  • Unlock user accounts

  • Move Home Folder

  • Enable user accounts

  • Delete Home Folder

  • Disable user accounts

  • Revoke Microsoft 365 licenses

  • Delete user accounts

  • Manage users' photos

  • Run custom scripts

  • Disable Lync accounts

  • Move users across groups

  • Configure auto reply settings

This list is not exhaustive; to get a list of all the actions that can be automated by selecting Boomi as the data source, click here.

  

Steps to generate the API key in Boomi  

  1. From the home page of Boomi, navigate to Flow.

  2. Click the user icon in the top-right corner.

 

  1. Go to User Settings and click Generate Key.

  1. Add x-boomi-flow-api-key as the header to your API requests (e.g., x-boomi-flow-api-key : <API-key>).

Note: The base API URL is https://flow.boomi.com.

 

 



                    New to ADSelfService Plus?