The Nubus Directory Importer is a packaged integration that enables unidirectional synchronization of directory objects from an external IAM directory service into Nubus. It is designed for organizations that already operate a directory service such as Microsoft Active Directory and want to make their users and groups available in Nubus without migrating their primary identity store.
How it works
The importer queries the source directory using LDAP, compares the retrieved objects with the current state in Nubus, and writes any differences via the UDM HTTP REST API. The complete organizational unit (OU) structure from the source directory is replicated into a dedicated OU within Nubus's OpenLDAP.
The service is stateless — it maintains no persistent local state between runs and can be restarted at any time without data loss.
What is synchronized
- User accounts
- User groups and group memberships
Password hashes are explicitly excluded from synchronization. Users authenticate against their original IAM system, with trust established between the external directory and Nubus via SAML or OpenID Connect.
Integration approach
The Nubus Directory Importer implements the IAM Connector interfaces defined by Nubus. It is deployed as a Kubernetes service and integrates with Nubus's identity provider (Keycloak) for single sign-on, allowing users to log in with their existing credentials from the source directory.
