Users and administrators can be authenticated by the default platform or by external LDAP system. LDAP ensures efficient use of data stored in the directory at several servers and uses various information synchronization methods.
To set up interaction with external LDAP system, use the LDAP Settings subsection.
To set up LDAP authentication:
Set LDAP connection parameters on the Connection tab:
Connect to LDAP Directory. Select the checkbox to further connect to LDAP directory.
Host. Specify IP address or DNS name, by which LDAP server is available. To check connection, click the Check Availability button. If the answer is yes, the Response Received green button is displayed; if the answer is no, the Unavailable red button is displayed. If the host is unavailable, check internet connection or server connection settings for the specified host.
Port. Specify TCP port, by which LDAP service is available.
Base DN. Specify branch of the LDAP directory, from which the platform searches for LDAP users.
Technical User Login. Enter technical user login in the LDAP system, who has permissions to read from LDAP directory.
Technical User Password. Enter technical user account password.
The boxes are mandatory.
Click the Check Connection button to check specified LDAP connection parameters. If the answer is yes, the Connected green button is displayed; if the answer is no, the Connection Error red button is displayed. If a connection error occurred, check internet connection or LDAP connection parameters.
Click the Synchronization button to check if user information is exchanged between LDAP and the platform. If the answer is yes, the Successful green button is displayed; if the answer is no, the Unsuccessful red button is displayed. If a synchronization error occurred, check internet connection or LDAP connection parameters. An automatic information exchange schedule can be set up for synchronization.
Click the Save button.
After this a LDAP directory connection is established.
To enter LDAP directory attributes:
Set attributes on the Attributes tab:
Click the Save button.
After this, the attributes are added, from which the platform can get necessary data.
To set up synchronization schedule:
Set parameters on the Schedule tab:
Click the Save button.
After this the synchronization schedule is set for exchanging user information between LDAP and the platform. The exchange is one-way, LDAP is a data source.
To disconnect LDAP directory:
Deselect the Connect to LDAP Directory checkbox on the Connection tab.
Click the Save button.
Select disconnection option:
Disconnect from LDAP Server. All administrators, users, and groups of users who use the specified LDAP server as an authentication server are disconnected from the authentication server.
Disconnect from LDAP Server and Delete Users. All administrators, users, and groups of users who use the specified LDAP server as an authentication server are disconnected from the authentication server and deleted.
If the administrator who disconnects LDAP server is authenticated via this server, the server will not be disconnected. The administrator must be authenticated without applying this LDAP server or execute the operation under the administrator who is not linked to this authentication server.
After this the LDAP directory is disconnected.
See also:
Setting Up System Security | Setting Up Digital Signature
LDAP authentication