Exchange Web Service Connector 26.3
Exchange Web Service Connector Help

# Introduction

The Exchange mapped security architecture includes the following components:

- Active Directory
- Exchange repository
- Exchange Web Service Connector
- Knowledge Discovery OmniGroupServer
- Knowledge Discovery Content and Community components
- A front-end application

Items in the Exchange repository have an Access Control List (ACL) that lists the users and groups who are permitted, and are not permitted, to view the item.

The Exchange Connector retrieves information from the repository and creates documents that can be indexed into your text index. The connector extracts the ACL for each item, and writes it to a document field. Each time the connector synchronizes with the repository, it extracts updated ACLs.

The Content component needs the ACL to determine whether a user can view a document that is returned as a result to a query. However, the Content component must also consider the groups that the user belongs to. A user might not be permitted to view a document, but they could be a member of a group that has permission. Exchange uses NT security. This means that the Content component requires the user and group information from your Active Directory.

OmniGroupServer extracts the security group information from Active Directory using LDAP, and stores it.

When a user logs on to a front-end application, the application requests the user’s security information and group memberships from the Community component. The Community component returns a token containing the information. The front-end application includes this token in all queries the user sends to the Content component.

After a user submits a query, the Content component sends the result documents and the user’s security token to the Mapped Security plug-in. The Mapped Security plug-in compares the user’s security information and group memberships to each document’s ACL. The plug-in determines which documents the user is permitted to view and returns the results. The Content component then sends only the documents that the user is permitted to view to the front-end application.

Copyright 2026 Open Text
Version 26.3 | Last updated July 2026

Send documentation feedback

Close

Send documentation feedback

To send feedback using your default email client, open an email window.

Otherwise, send your feedback and the information below to MFI-swpdl.idoldocsfeedback@opentext.com.

We appreciate your feedback!

Product: Knowledge Discovery Exchange Web Service Connector 26.3

Topic Title: Introduction