Options for authentication domain configuration
The Setup Authentication Domain wizard in Resiliency Platform allows you to define and manage external identity providers Active Directory and LDAP servers. This requires some settings to be configured in the authentication domain.
If you want to configure authentication domain from external identity provider, select the Configure authentication domain from external identity provider checkbox and provide the required details.
Table: Configuring authentication domain for LDAP standards
Options | Desc |
|---|---|
Server (Mandatory) | Enter the fully-qualified host name or IP address of the LDAP server. If a secure session is configured with the LDAP server using SSL certificates, you must enter the fully-qualified host name that matches with the fully-qualified host name in the LDAP server certificate. |
Port (Mandatory) | Displays the number of the port on which the LDAP server is configured to run. By default, this field displays the port number as 389. You can edit this port number, if required. |
Bind Username / DN | Enter the complete Distinguished Name (DN) of the user that is used to bind to the LDAP server. |
Password | Enter the password that is assigned to the bind user name that you use. |
Connect using SSL/TLS | Select this check box to use the Secure Sockets Layer (SSL) or Transport Layer Security (TLS) certificates to establish a secure channel between the authentication broker and the LDAP server. |
Certificate | Browse to the location of the trusted root CA certificate of the vendor that issued the LDAP server certificate. |
Query Information | |
User (Mandatory) | Under Query Information, enter the user name based on which the system detects the LDAP server-related settings. Ensure that the user name does not contain any special characters. The system determines the search base based on the user name that you specify in this field. |
Group | Enter the name of the user group based on which the system detects the LDAP server-related settings. Ensure that the group name does not contain any special characters. The system determines the search base based on the group name along with the user name that you have specified. |
LDAP standards: Select the standard from the below mentioned options and click Next to view the configuration details. There is option to get back to using Previous option. | |
RFC2307 | Resiliency Manager uses LDAP schema RFC2307 standard to populate the required attributes and discover the information from LDAP server. |
Microsoft Active Directory | Resiliency Manager uses LDAP schema Microsoft Active Directory is an Active Directory standard to populate the required attributes and discover the information from LDAP server. |
Custom | The LDAP server uses the default schema as part of LDAP configuration. |
After the LDAP standard is selected, click Configure.