LDAP (Lightweight Directory Access Protocol) is an application protocol for accessing and maintaining distributed directory information services over an Internet Protocol (IP) network.
By configuring an LDAP realm, it is possible to use an enterprise directory as a user database.
Users with the ADMIN
role can add and configure an LDAP realm as follows:
-
Access the Realms tab of the Authentication administration interface.
-
Select LDAP from the Available types menu to open the New realm drawer.
-
Configure the following parameters:
-
Realm identifier
It is not possible to modify a realm identifier after creating it.
-
Server URL
The server URL must begin by
ldap://
orldaps://
. -
System user and password
It is possible to define the DN (distinguished name) and password associated with a system user account.
-
Search base
It is possible to define an LDAP query describing the list of users who can log in to Fluid Topics.
-
Authentication mechanism
It is necessary to define an authentication mechanism. The default value is
simple
.
-
Optionally, configure profile mappers and search preferences.