Adding an LDAP account

To enable the iOS MDM device user to access corporate contacts on the LDAP server, add the LDAP account.

To add the LDAP account of the iOS MDM device user:

1. In the console tree, in the Managed devices folder, select the administration group to which the iOS MDM devices belong.
2. In the workspace of the group, select the Policies tab.
3. Open the policy properties window by double-clicking.
4. In the policy Properties window, select the LDAP section.
5. Click the Add button in the LDAP accounts section.

   The LDAP account window opens.

6. In the Description field, enter a description of the user's LDAP account. You can use macros from the Macros available drop-down list.
7. In the Account name field, enter the account name for authorization on the LDAP server. You can use macros from the Macros available drop-down list.
8. In the Password field, enter the password of the LDAP account for authorization on the LDAP server.
9. In the Server address field, enter the name of the LDAP server domain. You can use macros from the Macros available drop-down list.
10. To use the SSL (Secure Sockets Layer) data transport protocol to secure the transmission of messages, select the Use SSL connection check box.
11. Compile a list of search queries for the iOS MDM mobile device user access to corporate data on the LDAP server:
    1. Click the Add button in the Search settings section.

       A blank row appears in the table with search queries.

    2. In the Name column, enter the name of a search query.
    3. In the Search scope column, select the nesting level of the folder for the corporate data search on the LDAP server:
       • Base – search in the base folder of the LDAP server.
       • One level – search in folders on the first nesting level counting from the base folder.
       • Subtree – search in folders on all nesting levels counting from the base folder.
    4. In the Search base column, enter the path to the folder on the LDAP server with which the search begins (for example: "ou=people", "o=example corp").
    5. Repeat steps a-d for all search queries that you want to add to the iOS MDM device.
12. Click OK.

    The new LDAP account appears in the list.

13. Click the Apply button to save the changes you have made.

As a result, once the policy is applied, LDAP accounts from the compiled list will be added on the user's mobile device. The user can access corporate contacts in the standard iOS apps: Contacts, Messages, and Mail.