Page History
One can integrate an LDAP directory with LDAP directories can be integrated in iDNA Applications in order to allow users from a corporate directory to access the panagenda iDNA Applications informationweb interface.
This article explains how to configure the integration with an Active Directory or and Domino LDAP.Note: The internal
Note |
---|
Please note that the default iDNA Applications user accounts (e.g. Config) |
...
remain active and are valid |
...
parallel to all |
...
LDAP objects. |
Active Directory
- Click on Settings - LDAP Settings
- LDAP Settings
Type: Select Active DirectoryLDAP security: Select unsecure (ldap://) or secure (ldaps://)
LDAP host: Enter the Directory URL + Portdirectory URL
LDAP port: Type in the server port
Bind DN: Enter the canonical name of the bind user
...
User Filter: For Active Directory please enter the following string:
(sAMAccountName={{username}})
Role Mapping (Administrators - Monitoring- Viewer)
Assign a an AD Group to certain the respective role
Example: Office365Admins is an AD group with certain members (all these members would gain Admin Access administrator access to iDNA Applications)
IMPORTANT:
- If a user is member of an Administrator group and Viewer group, then the User gets the higher permission → Administrator
- If a user which is NOT member of any assigned group, tries to login, the user will not be able to login.
IBM Domino LDAP
- LDAP Settings
TypeLDAP security: Select Dominounsecure (ldap://) or secure (ldaps://)
LDAP host: Enter the Directory URL + Portdirectory URL
LDAP port: Type in the server port
Bind DN: Enter the canonical name of the bind user
...
User Filter: for Domino LDAP please enter the following string:
(cn={{username}})
Role Mapping (Administrators - Monitoring- Viewer)
Assign a AD Domino group to certain the respective role
Example: Office365Admins DominoAdmins is an AD a Domino group with certain members (all these members would gain Admin administrator access to iDNA Applications)
...
- If a user is member of an Administrator group and Viewer group, then the user User gets the higher permission → Administrator
- If a user which is NOT member of any assigned group, tries to login, the user will not be able to login.