Skip to main content

Identity management based on LDAP and database

Platform Enterprise Edition includes a synchronization module used to automatically import users stored in an LDAP server; this module must be configured in order to:
automatically start the process through the Platform Scheduler
import users from the LDAP server, based on specific filters defined through LDAP queries
In this scenario, users come from:
an LDAP server, used to manage the organization employees; users are then authenticated in the LDAP Server
the Platform local database, used to manage external users, not defined in the LDAP server, as for clients, suppliers, as so forth.

This scenario involves the definition of an authentication chain, where both the LDAP and Platform authentication sub-system must be defined.

After the standard Platform installation, including the Platform database authentication, a second sub-system must be added, in order to define the LDAP authentication.

The required settings must be defined in the "Application parameters" window, which can be accessed starting from the App Designer -> Application detail.
These are the settings to define:

LDAPxxx_AUTH_LDAP_ACTIVE = true
LDAPxxx_AUTH_LDAP_SERVER = ip LDAP server
LDAPxxx_AUTH_LDAP_PORT = porta LDAP server
LDAPxxx_AUTH_LDAP_USER_FORM = example: {u}@sinesy.it
LDAPxxx_AUTH_LDAP_GRPS_BASE = example: ou=xxx,dc=yyy,dc=zzz
LDAPxxx_AUTH_LDAP_USERNAME = username LDAP server
LDAPxxx_AUTH_LDAP_PASSWORD = password LDAP server
LDAPxxx_AUTH_LDAP_USERS_BASE = example: ou=xxx,dc=yyy,dc=zzz
LDAPxxx_AUTH_LDAP_USERS_FILTERS = example: (&(objectClass=_)(cn=_utente*))
Sources related to a synchronization process for groups/users = LDAPxxx
Logical deleting of users before the sync process = true
Sorted list of authentication systems = LDAP;4WS

where xxx = 1,2,etc.