| Panel | ||||
|---|---|---|---|---|
|
...
You can set up Universal Controller to use LDAP authentication for:
| Anchor | ||||
|---|---|---|---|---|
|
...
Step 1 | From the Administration navigation pane, select Configuration > LDAP Settings. The LDAP Settings page displays. |
|---|---|
Step 2 | Enter / select your LDAP Settings, using the field descriptions below as a guide.
|
Step 3 | Click the |
...
Field Name | Description | ||||||
|---|---|---|---|---|---|---|---|
Connection | This section contains information on the LDAP connection. | ||||||
URL | URL of the LDAP connection. For example:
To use SSL/TLS encryption (
| ||||||
| Distinguished Name (DN) or User ID used for initial access to the LDAP server. | ||||||
Bind Password | Password associated with the Bind ND or User. | ||||||
Use for Authentication | If enabled, indicates that LDAP will be used for password authentication. | ||||||
Allow Local Login | If the LDAP Synchronization Enabled Universal Controller system property is false, or if it is true but the 206427338 Use for Authentication field is not enabled, an administrator must explicitly specify Allow Local Login to allow local account login for users that were provisioned through LDAP synchronization. | ||||||
Search | This section contains search information. | ||||||
| Starting point for searching the directory. For example: | ||||||
User Id Attribute | LDAP attribute for the specified User ID.
| ||||||
User Filter | Search filter for users. | ||||||
User Target OU List | Single- or multi-level target OU's (Organizational Units) within the 206427338 Base DN directory to filter for user records. | ||||||
Group Filter | Search filter for groups. | ||||||
Group Target OU List | Single- or multi-level target OU's within the 206427338 Base DN directory to filter for group records. | ||||||
Advanced | This section contains advanced information. | ||||||
Connection Timeout (Seconds) | Timeout for connecting to the LDAP server. | ||||||
Read Timeout (Seconds) | Timeout for reading from the LDAP server. | ||||||
User Membership Attribute | LDAP attribute for the groups in which a user is a member. If you do not specify a User Membership Attribute, the LDAP server uses memberOf (see the | ||||||
Group Member Attribute | LDAP attribute for the members of a group. If you do not specify a Group Member Attribute, the LDAP server uses member (see the | ||||||
Login Method | Login method(s) that an LDAP-provisioned user can authenticate with by default. The default is applied only at user creation time. You can use the Ctrl key to select multiple methods. Only one of Standard or Standard / Authenticator App (TOTP) can be selected, not both.
| ||||||
Buttons | This section identifies the buttons displayed above and below the LDAP Settings that let you perform various actions. | ||||||
Update |
| ||||||
| After saving the LDAP Settings to the database, click Test Connection to run a connection test. | ||||||
Refresh | Refreshes any dynamic data displayed in the LDAP Settings. | ||||||
Tabs | This section identifies the tabs across the top of the LDAP Settings page that provide access to additional information about the LDAP Settings. | ||||||
Mappings | List of User and Group columns mapped to LDAP attributes that enables you to customize how the User/Group records get populated from LDAP. |
...
You specify the User and Group Target OUs relative from the 206427338 Base DN. In this case, the Base DN would be OU=Corporate,DC=stonebranch,DC=com.
For the 206427338 User Target OU List LDAP Settings field, you would have the following entries:
OU=NorthAmerica,OU=CorporateUsers |
OU=Students |
For the 206427338 Group Target OU List LDAP Settings field, you would have the following entries:
...
Once LDAP configuration has been completed, you can utilize the LDAP Refresh server operation to verify your configuration.
...
When these configurations have been made, use ldaps:// for the URL prefix in the 206427338 LDAP Settings Field Descriptions.