Admin Synchronisation via Active Directory connects your AD to your Phriendly Phishing account for company administrative requirements requiring access to the platform. When an administrator is configured in your AD, they will automatically synchronise as an Admin in your Phriendly Phishing account. When an administrator is removed, they will also be removed from your Phriendly Phishing account on the next scheduled sync.
Requirement:
To create an AD application you must have an Administrator access to your company's Active Directory instance.
1. Create an AD group
- Within Active Directory please create a security group named Phriendly Phishing Admins (Or your preferred naming convention).
- Add all members to the newly created AD group that you would like to provide Admin access to the Phriendly Phishing platform.
2. Install your AD Synchronise Script
- Log in to Phriendly Phishing. Go to Settings
and follow through per screenshot below.
- From an AD connected machine, run PowerShell in Administrator mode.
- Navigate to the directory that the SSO Synchronise Script was downloaded to and use the CD command. Back in PowerShell type without quotations ‘.\’ then paste in the file name followed by ‘.ps1’ and hit enter.
- PowerShell will ask you to enter the Authentication Token.
- Copy the Authentication Token to the clipboard and input that into PowerShell. Hit enter.
- You will now see a Sync Successful message.
- Go back to Phriendly Phishing platform, refresh the page and you will see a red notification on the bell icon. Click the bell and then ‘Click to proceed’.
3. Configure in Phriendly Phishing
- Navigate back to Phriendly Phishing platform, click
- Enable the Admin Synchronisation button.
4. Configure the Task Scheduler
- Select Action > Create Task.
- Once Task has been created, under General tab, fill out fields per below screenshot.
- Under Triggers tab.
- For the new Trigger, the Recommendation is setting the sync weekly at a minimum.
- Under Actions tab, click New.
- Once created, fill out per below for Program/script.
- Select Add arguments, fill out -ExecutionPolicy Bypass C:\<path of script location>\ph2_get_ad_users.ps1 -token <your unique id obtained in the platform.
- Click OK.
Warning
- There should be no spaces in the file path as it will cause issues with Powershell's ability to parse the arguments provided in the scheduled task.
- For Example : If the script is located at C:\Phriendly Phishing\get_ad_users.ps1, you will either need to do any of below bullet points:
- Update the path to remove any space characters (i.e. C:\PhriendlyPhishing\get_ad_users.ps1)
- Ensure the path to the script is encapsulated in quotes in the scheduled task arguments (-ExecutionPolicy Bypass "C:\Phriendly Phishing\get_ad_users.ps1" -token <token_goes_here>)
Congratulations! You have successfully configured synching your Admins straight from your Active Directory.
Comments
Please sign in to leave a comment.