Configure AD user provisioning for “Remote Desktop Connection” and “Remote App” applications

First Step - Install the latest AD Connector update

1. Download AD Connector latest version from MyWorkspace.
2. Stop “Matrix42 Universal Framework” windows service.
   
3. Launch MyWorkspaceCloudConnector.exe.
4. Wait untill update will be finished and when setup wizard (wizard where you will be asked to sign in into MyWorkspace) will be opened – just close it.
5. For “Matrix42 Universal Framework” windows service change the Log On account that will have enough permissions to create users in AD and add them to groups.
   
6. Click save and restart the service.

Second Step - Create Account mapping script for target AD connector

This JS script will be executed one step before AD user creation by AD provisioning workflow to transform user email from “foo” domain into “bar” domain.

1. Select your target AD connector (foo.com as example) and enable option “Dynamic Account Mapping”, and then create the Transformation script.
   
   Transformation script samples:
   Example 1:

   if (context.CurrentUser.MailAddress.endsWith('@foo.com')) { // Transfrom @ foo.com -> .m42@bar.com
       context.CurrentUser.MailAddress = context.CurrentUser.MailAddress.replace('@ foo.com', '.m42@bar.com');
   } else if (context.CurrentUser.MailAddress.endsWith('@foo.br')) { // Transfrom @ foo.br -> .m42@bar.br
       context.CurrentUser.MailAddress = context.CurrentUser.MailAddress.replace('@foo.br', '.m42@bar.br');
   }
   
   done(context);
   

   
   Example 2:

   context.CurrentUser.MailAddress = context.CurrentUser.MailAddress.replace('@foo.com', '.m42@bar.com');
   done(context);
   

2. Click save script button on the top panel.
   

Third Step - Create “Remote Desktop Connection” application with AD account provisioning option

1. Create "Remote Desktop Connection" application with the usual settings. Enable account provisioning as explained in the screenshot:
   
2. Add Active Directory groups to which new provisioned users should be assigned to.
   

Fourth Step - Assign users to “Remote Desktop Connection” application

1. Edit permissions for the newly created application.
2. Assign users directly to the application as in the screenshot below, to make sure account provisioning is started.