ForgeRock

ForgeRock Directory Services is a high-performance identity store that provides the necessary encryption to protect enterprise data at rest and encryption.

Types of Assets Fetched

This adapter fetches the following types of assets:

• Users
• Devices

Parameters

1. Host Name or IP Address (required) - The hostname or IP address of the ForgeRock server that Axonius can communicate.

2. User Name and Password (optional) - The credentials for a user account that has the permissions to fetch assets.

3. Verify SSL (optional, default: false) - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.

4. Port (optional) - The port used for the connection.

5. User Query Mode (optional, default: false) - Select whether to change the query mode from AND (&(objectClass=user)) to OR (|objectClass=user)). Default is AND mode.

6. User Filter (required, default: person) - Specify the queried object from the server. You can add multiple values in this parameter by separating them with a comma and without a space. For example: first,second

7. Device Query Mode (optional, default: false) - Select whether to use the Device Query mode.

8. Device Filter (required, default: device) - Specify the queried object from the server. You can add multiple values in this parameter by separating them with a comma and without a space. For example: first,second

9. Get All (optional, default: true) - Select whether to get all available subtree objects from the user and device.

10. HTTPS Proxy (optional, default: empty) - Connect the adapter to a proxy instead of directly connecting it to the domain.

11. HTTPS Proxy User Name (optional, default: empty) - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.

12. To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.

## Advanced Settings

• Assets per page (default 500, Min 10, Max 1000) - Set the number of assets to fetch at a time. Adjust this value to improve performance depending on the size of the records fetched. Larger for fewer requests/responses: appropriate for smaller record sizes. Smaller for managing response size: appropriate for larger record sizes.

APIs

Axonius uses the ForgeRock REST and LDAP API.

Required Ports

Axonius must be able to communicate with the value supplied in Host Name or IP Address via the following ports:

• 389
• 636
  
  

Required Permissions

The value supplied in User Name must have permissions to fetch assets, depending on the server configuration.

The value supplied in API Key must be associated with credentials that have permissions to fetch assets.

Version Matrix

This adapter was only tested with the versions marked as supported, but may work with other versions. Contact Axonius Support if you have a version that is not listed, which is not functioning as expected.

Supported From Version

Supported from Axonius version 4.5