Importing users with the Salesforce Platform license from an LDAP server

You can import users into your Salesforce organization by using the Pentaho Data Integration tool. The Pentaho package for importing users with the Salesforce Platform license from an LDAP server is available on the BMC Communities website. For information about how users are imported into your Salesforce organization, see Overview of how users are imported from LDAP servers.

The following topics provide information about importing users with the Salesforce Platform license from an LDAP server into your Salesforce organization:

Before you begin

Before you can import users from an LDAP server, you must perform the following tasks:

• Install Java Runtime Environment (JRE).
• Download the Pentaho Data Integration tool.
  If the Require TLS 1.1 or higher for HTTPS connections Salesforce critical update is enabled in your organization, you must use version 6.1 or later of the Pentaho Data Integration tool.

• Register at the BMC Communities website.
• If you have enabled the setting to access your Salesforce organization from limited IP addresses, ensure that you have the security token to log on to your Salesforce organization.
  For more information about the security token, see Salesforce Help.

• Download the Pentaho package from the BMC Communities website (https://communities.bmc.com/docs/DOC-22547).
  For information about the KJB (job) and KTR (transformation) files that are included in the Pentaho package, see KJB and KTR files for importing users from an LDAP server.

To import users with Salesforce Platform License from an LDAP server

1. To launch the Pentaho Data Integration tool, perform the following actions:
   

   1. Navigate to the location where you downloaded and unzipped the Pentaho Data Integration tool.

   2. Navigate to the data-integration folder and double-click the Spoon.bat file.

2. In Pentaho Spoon, select File > Open, navigate to the folder where you downloaded the Pentaho packages, and open the TransferLDAPInfo.kjb file.

3. On the TransferLDAPInfo tab, in the Transfer Lookup Excel Export step (transformation), provide your Salesforce organization access details.

    Click here to see the detailed steps.

   1. Right-click the Transfer LookUp Excel Export step, and select Open referenced object > Transformation.
   2. On the LookUp Excel Export tab, double-click one of the following steps:
      • Salesforce Input[For Profile]
      • Salesforce Input[From Account]
      • Salesforce Input[From UserRole]
      • Salesforce Input[For User Account Link]
   3. In the Salesforce Input window, enter your Salesforce organization user name and password.
   4. (Optional) To verify the connection, click Test connection and then click OK.
   5. To save your changes and close the Salesforce Input window, click OK.
   6. Repeat step 3b to step 3e for the other steps listed in step 3b.

   Note

   BMC recommends that you do not change the default API version in the Salesforce Webservice URL.

4. Click the TransferLDAPInfo tab.

5. In the Update client user import table with LDAP user information step (transformation), provide your LDAP server and Salesforce organization access details and, if required, customize the Pentaho package.

    Click here to see the detailed steps.

   Step	Action	Details
   a.	Open the Update client user import table with LDAP user information transformation.	Right-click the Update client user import table with LDAP user information step, and select Open referenced object > Transformation.
   b.	Provide LDAP server access details.	On the TransferLDAPInfo tab, perform the following actions: Double-click the LDAP input step. In the LDAP Input window, on the General tab, enter the host, user name, and password of the LDAP server from which you are importing users. (Optional) To verify the connection, click Test connection and then click OK. (Optional) To fetch more fields from the LDAP server, on the Fields tab, click Get fields. To save your changes and close the LDAP Input window, click OK.
   c.	(Optional) Customize the assignment of account and profile information to imported records based on specific LDAP attributes.	Perform the following actions: Double-click the Dynamic account and profile assignment step. Perform any of the following actions: Modify or assign the default value for account, profile, role, and custom values for specific conditions in the script. Modify the default value for the Locale, Language, TimeZone, and EmailEncoding fields. Click OK.
   d.	Provide the Salesforce organization access details.	Perform the following steps: Double-click one of the following steps: Salesforce Upsert [For User] Salesforce Insert [For User Account Link] Salesforce Update In the window that opens, enter your Salesforce organization user name and password. (Optional) To verify the connection, click Test connection and then click OK. To save your changes and close the window, click OK. Repeat step 5d-i to step 5d-iv for the other steps listed in step 5d-i. Note: BMC recommends that you do not change the default API version in the Salesforce Webservice URL.
   e.	(Optional) Update the predefined mapping between the LDAP fields and the Salesforce User object.	Perform the following actions: Double-click the Salesforce Upsert [For User] step. In the Salesforce Upsert window, click Edit Mapping. In the Enter Mapping window, update mappings for other fields based on your requirements. For more information about mapping, see Overview of how users are imported from LDAP servers. To save your settings and close the Enter Mapping window, click OK. To save your changes and close the Salesforce Upsert window, click OK.

6. To save the KTR and KJB files, click Save .

7. In the TransferLDAPInfo.kjb file, click Run this job .

8. Perform one of the following actions based on the Pentaho version that you are using:

   Pentaho version	Action
   6.1	In the Run Options window, click Run.
   5.4	In the Execute a job window, click Launch.

   Transformation status is depicted by using the following icons:

   • — Complete
   •   — Running
   • — Unsuccessful
9. (Optional) To view logs, in the Execution results section, click the Logging tab.
   All errors are displayed in red.

KJB and KTR files for importing users from an LDAP server

In Pentaho, metadata is stored in XML format in the file system as KTR (transformations) or KJB files (jobs). The Pentaho package includes the TransferLDAPInfo.kjb file (job file) for importing users from an LDAP server. The job (KJB) file contains a series of transformations that run in a sequence. Each transformation maps to a KTR file that is available, along with the KJB file, in the Pentaho package.

The following table provides information about the KTR files and the corresponding transformations that the KJB file contains:

The following table provides information about the steps that are included in the TransferLDAPInfo.ktr file (Update client user import table with LDAP user information transformation). The Pentaho package runs these steps to import users from the LDAP server into your Salesforce organization. You can view these steps only when you open the KTR file in the Pentaho Data Integration tool.

The KTR file also contains mapping of the fields in the LDAP server to the fields in the User table. For more information about mapping, see Overview of how users are imported from LDAP servers.

Related topics

Overview of how users are imported from LDAP servers

Scheduling jobs to import data

Troubleshooting common issues when importing data