About LDAP Lookup Plug-Ins

The LDAP Lookup Plug-In pulls data from a live LDAP system (such as Microsoft Active Directory, Oracle Directory Server, or IBM Tivoli). It then uses that data to populate custom attributes for an incident at the time the incident is generated.
The LDAP Lookup Plug-In receives a group of lookup parameters that contain data about an incident from the Enforce Server. These lookup parameters are then used in LDAP queries to pull data out of an existing LDAP directory. For example, the value of the
sender-email
lookup parameter might be compared to the values in the
email
attribute of the directory. If the
sender-email
lookup parameter contains , a query can be constructed to search for a record whose
email
attribute contains . Data in the record that the search returns is inserted into the custom attributes for the incident.