Centrify DirectManage Access SDK enables you to programmatically manage, administer, and provision identity and rights in Active Directory.
With this SDK, you can use Active Directory as the central identity repository, rights-management provider, and directory for systems running UNIX, Linux, Mac OS, and Windows. This includes the user, group, and NIS map data. In-house and commercial solutions such as Microsoft Identity Integration Server (MIIS) can use these capabilities to programmatically manage, administer, and provision all of the identity, access, and rights-management information stored in Active Directory.
DirectManage Access SDK provides a Windows API that you can call in VBScript, JScript, PowerShell, and .NET. The API includes high-level functions to add, modify, or delete DirectControl objects such as zones, UNIX user profiles, and Active Directory Groups within UNIX and NIS maps. The SDK's classes and methods support Centrify enhancements to Active Directory, including hierarchical zones, DirectManage roles, computer roles, and role-based rights management. To jumpstart your development efforts, the SDK includes programming examples. The SDK also provides Windows integration modules for popular provisioning products, including the DirectManage Extension for the MIIS Management Agent.
The DirectControl SDK offers a set of OpenLDAP commands, including
ldapdelete, which are enhanced to operate seamlessly in Active Directory. For example, DirectControl SDK provides enhanced OpenLDAP commands that:
- Support Kerberos-based authentication to Active Directory.
- Facilitate Active Directory "site awareness" that finds the nearest domain controller in the current domain.
- Support the Global Catalog to find objects that might be managed in remote domains.
With an understanding of DirectControl's zone-based and RFC-2307-based data storage model, you can use standard LDAP commands to create programs and scripts that provision and administer DirectControl objects within Active Directory.
If you are an existing customer, you can license DirectManage SDK from Centrify on a per-developer basis. To get access to the SDK, please ask your Centrify contact person for assistance. Otherwise, to have a salesperson call you, please fill out this form.
If you are a manufacturer of storage systems, network devices, and other IT infrastructure components, you can strengthen security and enhance manageability for your customers by "Active Directory-enabling" your solutions. To commercially distribute applications or systems you enhanced with DirectManage SDKs, become an Alliance Partner by filling out this form.