Page Comparison

allowLocalLogin

Allow Local Login

If the LDAP Synchronization Enabled Universal Controller system property is false, or if it is true but the Use for Authentication field is not enabled, an administrator must explicitly specify Allow Local Login to allow local account login for users that were provisioned through LDAP synchronization.

N

baseDn

Base DN

Starting point for searching the directory. For example: dc=stonebranch,dc=com. If you do not specify a Base DN, the search starts as the root of the directory tree.

N

url

URL

URL of the LDAP connection.

Y

bindDn

Bind DN or User

Distinguished Name (DN) or User ID used for initial access to the LDAP server.

N

bindPassword

Bind Password

N

useForAuthentication

Use for Authentication

If enabled, indicates that LDAP will be used for password authentication.

N

userIdAttribute

User Id Attribute

LDAP attribute for the specified User ID.
 
Options:

• sAMAccountName

• cn

• uid

• Other...

Y

userFilter

User Filter

Search filter for users.
 
If you do not specify a User Filter, the server uses (&(objectClass=user)(objectCategory=person)).

N

userTargetOuList

User Target OU List

Single- or multi-level target OU's (Organizational Units) within the Base DN directory to filter for user records.
 
For example, OU=Employees or OU=Employees,OU=Users.
 
If you do not specify one or more OU's, the entire sub-tree from the Base DN will be searched.

N

groupFilter

Group Filter

Search filter for groups.
 
If you do not specify a Group Filter, the server uses (&(objectClass=group)(objectCategory=group)).

N

groupTargetOuList

Group Target OU List

Single- or multi-level target OU's within the Base DN directory to filter for group records.
 
For example, OU=Universal Controller or OU=Universal Controller,OU=Groups.
 
If you do not specify one or more OU's, the entire sub-tree from the Base DN will be searched.

N

connectTimeout

Connect Timeout (Seconds)

Timeout for connecting to the LDAP server.

N

readTimeout

Read Timeout (Seconds)

Timeout for reading from the LDAP server.

N

userMembershipAttribute

User Membership Attribute

LDAP attribute for the groups in which a user is a member. If you do not specify a User Membership Attribute, the LDAP server uses memberOf (see the uc.ldap.users.synchronize_indirect Universal Controller start-up property.

N

groupMemberAttribute

Group Member Attribute

LDAP attribute for the members of a group. If you do not specify a Group Member Attribute, the LDAP server uses member (see the uc.ldap.groups.update_members Universal Controller start-up property.

N

loginMethod

Login Method

Login method(s) that an LDAP-provisioned user can authenticate with by default. The default is applied only at user creation time.
 
Options:

• Standard
• Single Sign-On
• Standard, Single Sign-On

• Standard / Authenticator App (TOTP)

• Standard / Authenticator App (TOTP), Single Sign-On

Y

mappings

List of Controller columns mapped to LDAP attributes.