How to Enable LDAP over SSL

1. To facilitate SSL requests, it's essential to enable LDAP over SSL (LDAPS). Refer here to set up LDAPS on Windows Server.
2. Once LDAPS is activated, you'll receive an LDAPS certificate, preferably in .pfx format (a password-protected certificate file). Copy this certificate to the machine where the Bridge is installed.
3. Open the Bridge/conf/ldap-config.properties file and locate the bridge.ldap.use.ssl=false property. Change the value from 'false' to 'true' (i.e., bridge.ldap.use.ssl=true).
4. Specify the file path of the certificate in the property bridge.ldap.ssl.certificate.path=<PATH_WHERE_CERTIFICATE_IS_PLACED>.
5. Encrypt the certificate password before adding it to the configuration. To encrypt the password, navigate to the Bridge/bin directory and encrypt.bat <PASSWORD>.
6. Add the encrypted password of the certificate to the property bridge.ldap.ssl.certificate.password=<ENCRYPTED_PASSWORD_OF_THE_CERTIFICATE>.
7. By default, port 389 is used for non-SSL requests, and port 636 is used for SSL requests. If you need to use a custom port, specify it in the property bridge.ldap.use.custom.port=<CUSTOM_PORT>
   
8. Once all configurations are completed, restart the bridge to apply the changes.

{
    "task_details": {
      "ad_host": "<HOST_NAME>",
      "ad_dn": "<DN OF THE AD MACHINE>",
      "activity_name": "create_object",
      "object_name": "<OBJECT_NAME>",
      "organization_unit": "<ORGANIZATION_UNIT_NAME>",
      "object_type": "user",
      "properties": {
         "ObjectClass": "user",
         "givenName": "<DISPLAY NAME OF THE USER>"
      }
    },
    "task_name": "ad_task",
    "credential": {
      "name": "<CREDENTIAL_NAME>"
    }
}

{
    "task_details": {
      "ad_host": "<HOST_NAME>",
      "ad_dn": "<DN OF THE AD MACHINE>",
      "activity_name": "create_object",
      "object_name": "<OBJECT_NAME>",
      "organization_unit": "<ORGANIZATION_UNIT_NAME>",
      "object_type": "computer",
      "properties": {
         "ObjectClass": "computer",
         "givenName": "<DISPLAY NAME OF THE OBJECT>"
      }
    },
    "task_name": "ad_task",
    "credential": {
      "name": "<CREDENTIAL_NAME>"
    }
}

{
    "task_details": {
      "ad_host": "<HOST_NAME>",
      "ad_dn": "<DN OF THE AD MACHINE>",
      "activity_name": "create_object",
      "object_name": "<OBJECT_NAME>",
      "organization_unit": "<ORGANIZATION_UNIT_NAME>",
      "object_type": "group",
      "properties": {
         "ObjectClass": "group",
         "givenName": "<DISPLAY NAME OF THE GROUP>"
      }
    },
    "task_name": "ad_task",
    "credential": {
      "name": "<CREDENTIAL_NAME>"
    }
}

Add User To Group  

{
    "task_details": {
      "ad_host": "<HOST_NAME>",
      "ad_dn": "<DN OF THE AD MACHINE>",
      "activity_name": "add_user_in_group",
      "user_name": "<USER_NAME>",
      "group_name": "<NAME OF THE GROUP>"
    },
    "task_name": "ad_task",
    "credential": {
      "name": "<CREDENTIAL_NAME>"
    }
}

{
    "task_details": {
      "ad_host": "<HOST_NAME>",
      "ad_dn": "<DN OF THE AD MACHINE>",
      "activity_name": "disable_user",
      "user_name": "<USER_NAME>"
    },
    "task_name": "ad_task",
    "credential": {
      "name": "<CREDENTIAL_NAME>"
    }
}

{
    "task_details": {
      "ad_host": "<HOST_NAME>",
      "ad_dn": "<DN OF THE AD MACHINE>",
      "activity_name": "enable_user",
      "user_name": "<USER_NAME>"
    },
    "task_name": "ad_task",
    "credential": {
      "name": "<CREDENTIAL_NAME>"
    }
}

{
    "task_details": {
      "ad_host": "<HOST_NAME>",
      "ad_dn": "<DN OF THE AD MACHINE>",
      "activity_name": "unlock_account",
      "user_name": "<USER_NAME>"
    },
    "task_name": "ad_task",
    "credential": {
      "name": "<CREDENTIAL_NAME>"
    }
}

{
    "task_details": {
      "ad_host": "<HOST_NAME>",
      "ad_dn": "<DN OF THE AD MACHINE>",
      "activity_name": "reset_password",
      "user_name": "<USER_NAME>",
      "password": "<PASSWORD>",
      "is_unlock_account": true,
      "is_user_reset_password_next_logon": true
    },
    "task_name": "ad_task",
    "credential": {
      "name": "<CREDENTIAL_NAME>"
    }
}