Page History
One can integrate an LDAP directory with iDNA Applications in order to allow users from a corporate directory to access iDNA Applications informationIn addition to the internal user management, existing corporate LDAP directories can be integrated in iDNA Applications.
This article explains how to configure the integration with an Active Directory or and Domino LDAP.Note: The internal
| Note |
|---|
Please note that the default iDNA Applications user accounts (e.g. Config) |
...
remain active and are valid |
...
parallel to all |
...
LDAP objects. |
Active Directory
- Click on Settings - LDAP Settings
- LDAP Settings
Type: Select Active DirectoryLDAP security: Select unsecure (ldap://) or secure (ldaps://), depending on your environment
LDAP host: Enter the Directory URL + Portdirectory URL
LDAP port: Type in the server port
Bind DN: Enter the canonical name of the bind user
...
User Filter: For Active Directory please enter the following string:
(sAMAccountName={{username}})
Role Mapping (Administrators - Monitoring- Viewer)
Assign a an AD Group to certain the respective role
Example: Office365Admins is an AD group with certain members (all these members would gain Admin Access administrator access to iDNA Applications)
IMPORTANT:
- If a user is member of an Administrator group and Viewer group, then the User gets the higher permission → Administrator
- If a user which is NOT member of any assigned group, tries to login, the user will not be able to login.
...
Domino LDAP
- LDAP Settings
Type: Select DominoLDAP security: Select unsecure (ldap://) or secure (ldaps://), depending on your environment
LDAP host: Enter the Directory URL + Portdirectory URL
LDAP port: Type in the server port
Bind DN: Enter the canonical name of the bind user
...
User Filter: for Domino LDAP please enter the following string:
(cn={{username}})
Role Mapping (Administrators - Monitoring- Viewer)
Assign a AD Domino group to certain the respective role
Example: Office365Admins DominoAdmins is an AD a Domino group with certain members (all these members would gain Admin administrator access to iDNA Applications)
...
- If a user is member of an Administrator group and Viewer group, then the user User gets the higher permission → Administrator
- If a user which is NOT member of any assigned group, tries to login, the user will not be able to login.