From the perspective of a website user, active directory integration makes single sign-on simple. Whether the website is an intranet, internet, extranet, or portal, you can be assured that your users will benefit from a single sign-on across the enterprise.
In the example of a public-facing website, you may wish to have non-AD users. This is fine – all of the people in your domain will be able to use the services and personalisation you want within the context of their Active Directory user account.
If an employee leaves the organisation, or moves department, you can update their AD details and they will no longer be able to access any restricted resources.
From a content editor's perspective, AD integration means that there are no barriers to the system. If you are logged on to your computer on the domain, you can be automatically logged in to Contensis. All you need do is type in the web address in the browser.
Other advantages include the ability to carry out tasks such as authorising content directly from your email client. The user will receive an email notification and then can simply click on the authorise or decline button without having to do anything else.
From an administrator's perspective, AD integration simplifies the management of your users and groups. You will not need to keep separate accounts for different users, just their AD account is all that is required.
When Contensis synchronises with the active directory there are a whole set of fields available for synchronisation, and if required you can even configure custom fields too.
You can decide where the single point of truth is for your data. If, for example, your AD has a limited set of data in relation to email addresses and job titles, then you can let users update them in Contensis. Alternatively, they can be read-only in Contensis and the AD can control them. You decide what synchronises and what is editable.
If you are concerned that the AD does not contain enough data, or the data does not map well to your content management needs, you can create a separate group hierarchy in Contensis. This can also be useful if AD administration is done centrally and is inflexible.
There's no need to worry about security – all Contensis requires is a single read-only account to the directory. Authentication is carried out directly against your existing AD infrastructure.
Developers can use any data in the active directory for personalisation. If you want a different homepage for different groups, this can be achieved with a few lines of code.
As with all other areas of Contensis, the entire AD integration is available through the Contensis core API.