Service Manager

Home 

Setting Up External Authentication with LDAP

Setting Up Authentication for LDAP

Using LDAP Synchronization

Setting Up Authentication for LDAP

Use port 389 for LDAP (or port 636 for LDAPS). The protocol for LDAP is TCP.

1.From the Configuration Console, click Configure > Security Controls > Authentication Providers to open the Authentication Providers workspace.

2.From the New Record Menu drop-down list, select New LDAP.

New LDAP Provider Page

3.Enter data into the fields.

Field Description
Default

Specifies if this authentication provider is called.

 

Automatically set by the application. You change this in the list. To make this authentication provider the default, you must first change the Default setting for all other authentication providers to false and then change the Default setting for this authentication provider to true.

Disabled Specifies if this authentication provider is disabled.

Name

The LDAP server name or alias.

LDAP Server

Name or IP address of the LDAP server used for authentication. If a non-standard LDAP port is used add it to the server name with a colon (serverName:port).

Sort Order

Specifies the sort order of this provider in relation to other providers assigned to a user. A value of 1 means that this provider is used first for authentication when logging in. If a login failure occurs (such as a server failure or incorrect password), the application uses the next provider in the sort order. The last successfully authenticated login is highlighted in the Enable External Auth area of the employee record. Use this field only if multiple authentication providers are configured.

Connect to eDirectory Open LDAP Server:

Connects to eDirectory and the Open LDAP server.

Use SSL Connection

Allows a connection to a LDAPS server. The target LDAP server should also be configured correctly as a trusted certificate authority. If using an LDAPS server that is not a trusted certificate authority, use the Browse button to locate a certificate file, which should contain the fully qualified domain name path of the LDAP profile.

Expiration Date

Specifies the date that the certificate expires. This field merely stores the date so that you can see when the current one expires and get another certificate before or when it expires.

Auto Provision Role

Only displays if you check Auto Provisioning.

 

The role associated with the new user.

Auto Provision Status

Only displays if you check Auto Provisioning.


The status of the new user.

Auto Provision Team

Only displays if you check Auto Provisioning.

 

The team associated with the new user.

Auto Provision User Business Object

Only displays if you check Auto Provisioning.

 

The type of user record to create. Can be either employee or external contact.

4.Click Save.

5.Log in to the Service Desk Console.

6.Open the Employee workspace. The application displays a list of employees.

7.Open the employee record to set up authentication for.

8.From the employee record, reference the newly created authentication provider. Ensure the following:

The value of the Login ID field should be the ID to access LDAP (required).

The Enable External Auth field is checked.

The Login for External Auth field is populated and references the newly created authentication provider.

Edit External Login Window

Using LDAP Synchronization

If you enable external authentication, you must synchronize employee profiles from the LDAP directory server. For more information about LDAP synchronization, see Configuring LDAP Settings.


Was this article useful?