Connecting to your company directories
You can connect
BlackBerry UEM
to your company directory so that it can access the list of users in your organization. You can connect BlackBerry UEM
to multiple directories and the directories can be a combination of both Microsoft Active
Directory
and LDAP.When your company directory is connected, you can take advantage of the following features:
- You can create user accounts inBlackBerry UEMusing user data from the directory, andBlackBerry UEMcan authenticate administrators for the management console and users forBlackBerry UEM Self-Service.
- You can link company directory groups withBlackBerry UEMgroups to organize users inBlackBerry UEMthe same way that they are organized in your company directory. See Enable directory-linked groups.
- You can enable onboarding for specific groups in your company directory to createBlackBerry UEMusers automatically. If you enable onboarding, you can also configure offboarding to delete device data or user accounts when users are removed from groups in your company directory. See Enabling onboarding.
If you do not connect
BlackBerry UEM
to a company directory, you can manually create local user accounts and authenticate administrators using default authentication.To connect
BlackBerry UEM
to a company directory, perform the following actions:Step | Action |
---|---|
![]() | Create a connection to a Microsoft Active Directory instance or to an LDAP directory. If your environment includes a resource forest, see Configuring Microsoft Active Directory authentication in an environment that includes Exchange linked mailboxes. |
![]() | Optionally, enable directory-linked groups. |
![]() | Optionally, enable onboarding. |
![]() | Optionally, add a synchronization schedule. |