Add an Authentication Configuration – LDAP

Use the following procedure to add an LDAP authentication configuration:

1.  Select Authentication Setup from the Security section of the Setup menu. The Authentication Setup page is displayed.

2.  Click Add.

3.  Complete the following fields:

•     Authentication Type – Select LDAP from the drop-down menu.

•     Name - Enter a name for the authentication configuration.

•     Priority – Enter a number to define in which order the authentication should be performed relative to the other authentication configurations. When multiple user authentication providers are enabled, ResCenter will verify user information with each provider in the list in descending order. The list of providers is ordered from lowest number first to highest number (last). The default ResCenter provider is always checked last and cannot be edited or disabled. Any user name will first be checked against the list of defined, enabled providers in descending order, and then it will be checked against the ResCenter provider last.

•     Scheme – Select either LDAP or LDAPS from the drop-down menu. LDAP is the standard protocol. Selecting LDAPS (LDAP over SSL) may require additional configuration based on the network configuration.

•     Host - Enter the fully qualified domain name or IP address of the LDAP server to search.

•     Port - Enter the port to use when accessing the directory Host machine. Use 389 for LDAP or 636 for LDAPS.

•     DIT Root - In the DIT Root field, enter parameters to define the scope of the LDAP. This is the branch of the LDAP tree which is used as the base when searching for users. Enter an LDAP query based on your LDAP structure. For example:

For example.com, enter dc=example,dc=com.

Contact your institution’s IT department for more information, if necessary.

•     User DN - In the User DN (Distinguished Name) field, enter parameters to define the filter applied when searching for a user. Enter the filter using LDAP query language. Contact your institution’s IT department for more information, if necessary

4.  If the LDAP server requires authentication, check the Server requires authentication check box.

Enter a Manager DN and Manager Password with privileges sufficient to perform directory searches.

5.  To make the user authentication provider available for use, check the Enabled check box.

6.  Click Save.

After adding an LDAP configuration, each user must be connected to the configuration via Setup > Security > Users.