Active Directory Configuration

Note: we use LDAP as protocol, after the configuration in IF, AD users can login into IF with selecting corresponding IDP type and their user/password.

Microsoft AD:

1. Global External Service Provider name: user input
2. Client Id: same as server address
3. Domain Name: The domain of the AD server, for example: insightfinder.com
4. Server Address: The server address where AD is hosted, for example: abc.insightfinder.com
5. Bind user id, Client secret: The account that bind the AD server and the password of the bind user, not required, if provided IF can grab all the groups within the server for selection
6. Group List: giving a group of users in AD access to IF and assign roles in IF, can also choose System when selecting group, and this System will be automatically shared with all new users from this AD group. Example for group: CN=IF-user-accounts, OU=Dynamic, OU=Groups, DC=insightfinder, DC=com

 

OpenLDAP:

1. Global External Service Provider name: user input
2. Bind User Id: The account that bind LDAP server
3. Group List:Group List: giving a group of users in AD access to IF and assign roles in IF. For example: CN=IF-user-accounts, OU=Dynamic, OU=Groups, DC=insightfinder, DC=com
4. Client Secret: The password of the bind user
5. Domain Name: The domain of the AD server, for example: insightfinder.com
6. Server Address: The server address where AD is hosted, for example: ldap://1.11.111.11:345
7. Login Attribute: allow user to set up the attribute they want to use for log in, for example, uid