Home
Connecting to other systems
Learn how to connect ClearID to other systems.
Synchronizing identities using LDAP
To automate role-based access control and assign people to roles, you can synchronize Active Directory (AD) Lightweight Directory Access Protocol (LDAP) attributes using the LDAP Synchronization Agent in Genetec ClearID™.
LDAP attributes to ClearID attribute mappings
The mapping of Active Directory (AD) Lightweight Directory Access Protocol (LDAP) attributes to Genetec ClearID™ identity attributes ensures data consistency and supports automated role-based access control.

About ClearID
Learn about the ClearID self-service physical access management solution.
What's new
Check out what's new in the latest update to ClearID.
Deployment preparation
Check your compatibility and deployment requirements.
Account configuration
Learn how to configure and customize the ClearID portal.
ClearID plugin
Learn how to download and install the plugin.
Managing identities and users
Learn how to manage identities and users.
Credential synchronization
Managing sites
Learn how to manage sites.
Managing visitors
Learn how to manage visit requests and access requests.
Managing areas
Learn how to manage areas.
Managing visitor watchlists
Learn how to manage visitor access using watchlists.
Role-based access control
Learn about role-based access control.
Connecting to other systems
Learn how to connect ClearID to other systems.
- Authenticating your connection
  To allow external applications to synchronize data or issue API commands, you must first authenticate the connection in Genetec ClearID™.
- Data synchronization overview
  Setting up data synchronization in Genetec ClearID™ involves learning some concepts, configuring the synchronization solution for your identity data, and the webhook integration options that are relevant for your organization.
- Synchronizing identities using Microsoft Entra ID
  To map external system attributes to internal identity profiles, Account administrators and IT security personnel can synchronize identities using Microsoft Entra ID in Genetec ClearID™.
- Synchronizing identities using Cloud CSV
  To synchronize attributes from CSV files into Genetec ClearID™ identity attributes, you can use the web portal's Cloud CSV synchronization.
- How identities are synchronized using an API
  Use the Genetec ClearID™ API to code your own solutions to automate various functions in ClearID. The primary use for the REST API is synchronizing identities, however many other scenarios are also possible.
- Synchronizing identities using the SCIM integration
  To synchronize external system attributes from a supported identity provider into Genetec ClearID™ identity attributes, you can use the System for Cross-domain Identity Management (SCIM) integration. These identity attributes can then be used in ClearID to assign people to roles and automate role-based access control.
- Synchronizing identities using One Identity
  To automate role-based access control and assign people to roles, you can synchronize external system attributes using the One Identity Synchronization Tool in Genetec ClearID™.
- Synchronizing identities using LDAP
  To automate role-based access control and assign people to roles, you can synchronize Active Directory (AD) Lightweight Directory Access Protocol (LDAP) attributes using the LDAP Synchronization Agent in Genetec ClearID™.
  - About ClearID LDAP Synchronization Agent
    The Genetec ClearID™ LDAP Synchronization Agent is a Windows application that is used to synchronize Active Directory (AD) Lightweight Directory Access Protocol (LDAP) attributes into Genetec ClearID™ identity attributes.
  - LDAP attributes to ClearID attribute mappings
    The mapping of Active Directory (AD) Lightweight Directory Access Protocol (LDAP) attributes to Genetec ClearID™ identity attributes ensures data consistency and supports automated role-based access control.
  - Configuring the ClearID LDAP Synchronization Agent
    To automate identity processing and role-based access control, IT and security personnel must configure directory and API settings in the LDAP Synchronization Agent for Genetec ClearID™.
Visitor management devices
Learn about the ClearID Self-Service Kiosk mobile app that simplifies visitor management and check-in.
Troubleshooting
Troubleshoot common issues that can occur.
Additional resources
Need tech support or product information? Check out these resources.
Glossary

LDAP attributes to ClearID attribute mappings

2026-05-06

The mapping of Active Directory (AD) Lightweight Directory Access Protocol (LDAP) attributes to Genetec ClearID™ identity attributes ensures data consistency and supports automated role-based access control.

LDAP attributes to ClearID attribute mappings


LDAP attributes	ClearID identity attributes
whenChanged Important: The whenChanged attribute indicates the last time a synchronization with the ClearID LDAP Synchronization Agent occurred. This attribute is then used to query Active Directory users that have changed since the last synchronization so that only changed users are updated when the next synchronization occurs.	Not applicable
userAccountControl	Status Note: The ClearID Status attribute is set to inactive if the Active Directory attribute userAccountControl is set to disabled.
givenName	FirstName
sn	LastName
displayName	DisplayName
jpegPhoto	Note: jpegPhoto Is used to upload a picture into the ClearID identity.
thumbnailPhoto (fallback if jpegPhoto is empty)	Note: thumbnailPhoto is used as a fallback ( if jpegPhoto is empty) to upload a picture into the ClearID identity.
countryCode	CountryCode
employeeID	EmployeeNumber
employeeNumber (fallback if employeeID is empty)	EmployeeNumber
hrStatus	Worker type description
title	JobTitle
telephoneNumber	PhoneNumberPrimary
phone	PhoneNumberSecondary
preferredLanguageCode	Culture
Mobile (fallback if phone is empty)	PhoneNumberSecondary
department	DepartmentName
company	CompanyName
userPrincipalName Note: The userPrincipalName attribute is used as the link between the AD user and the ClearID identity.	Email, ExternalId
manager	SupervisorName
mail	Email