tools4everbv / helloid-conn-prov-target-exchangeon-premise

Exchange On-Premise - Target - Permissions

ℹ️ Information
This repository contains the connector and configuration code only. The implementer is responsible to acquire the connection details such as username, password, certificate, etc. You might even need to sign a contract or agreement with the supplier before implementing this connector. Please contact the client's application manager to coordinate the connector requirements.

Versioning

Version	Description	Date
1.0.0	Initial release	2022/03/30
1.1.0	Added permissions to shared mailboxes as entitlements	2022/04/13

Table of Contents

• Table of Contents
• Requirements
• Introduction
• Configuring Exchange
• Connection settings
• Getting help
• HelloID Docs

Requirements

• Execute the cmdlet Enable-PsRemoting on the Exchange server to which you want to connect.
• Within IIS, under the Exchange Back End site for the Powershell sub-site, check that the authentication method Windows Authentication is enabled.
• Permissions to manage the Exchange objects, the default AD group Organization Management should suffice, but please change this accordingly.
• Required to run On-Premises.
• Concurrent sessions in HelloID set to a maximum of 1! If this is any higher than 1, this may cause errors, since Exchange only support a maximum of 3 sessions per minute.

Introduction

For this connector we have the option to correlate to existing Exchange On-Premise users and provision groupmemberships.

Only Exchange groups are supported, if the group can be managed via AD, we advise to do so

If you want to create Exchange On-Premise users, please use the built-in Microsoft Active Directory target system and make use of the Exchange Integration.

Configuring Exchange Management Shell

By using this connector you will have the ability to manage groupmemberships. Since we use the cmdlets from the Exchange Management Shell, it is required to Enable-PsRemoting on the Exchange Server, allow Windows Authentication for the IIS site and assign permissions to the service account. For more information, please check out the Microsoft docs.

Connection settings

The following settings are required to connect.

Setting	Description
Connection Uri	The connection uri of the on-prem Exchange
Username	The username of the service account in Exchange
Password	The password of the service account in Exchange
Authentication Method	The authentication method that is used to authenticate the user's credentials

Getting help

For more information on how to configure a HelloID PowerShell connector, please refer to our documentation pages

If you need help, feel free to ask questions on our forum

HelloID Docs

The official HelloID documentation can be found at: https://docs.helloid.com/

helloid-conn-prov-target-exchangeon-premise's Issues

multiple resource scripts > failed connection

When using multiple resource scripts the same session will be used and results in an error while creating one of the resources.

https://github.com/Tools4everBV/HelloID-Conn-Prov-Target-ExchangeOn-Premise/blob/ad925009666777e3e09245a70a898c668c134b3e/resources.groups.ps1#L91C2-L91C3