{"id":467,"date":"2024-03-19T06:22:03","date_gmt":"2024-03-19T05:22:03","guid":{"rendered":"https:\/\/kb.apptec360.com\/manual\/?post_type=knowledgebase&p=467"},"modified":"2024-04-25T09:13:19","modified_gmt":"2024-04-25T07:13:19","slug":"ldap-overview","status":"publish","type":"knowledgebase","link":"https:\/\/kb.apptec360.com\/manual\/knowledgebase\/general-settings\/ldap-configuration\/ldap-overview\/","title":{"rendered":"LDAP Overview"},"content":{"rendered":"\n

Here you can establish a connection to your Active Directory via LDAP to mass import users and groups. The sync has to be performed manually. You can configure multiple LDAP connections to different systems or with different configurations\/filter.<\/p>\n\n\n\n\n\n\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t
Edit<\/a><\/caption>\n

\n

Server Name<\/p>
\n <\/td>


\n

The Display Name of the Server<\/p>
\n <\/td>\n<\/tr>\n


\n

Type<\/p>
\n <\/td>


\n

Currently only Active Directories which support LDAP are supported<\/p>
\n <\/td>\n<\/tr>\n


\n

LDAP Domain<\/p>
\n <\/td>


\n

The primary LDAP Domain (e.g. example.com)<\/p>
\n <\/td>\n<\/tr>\n


\n

LDAP Host<\/p>
\n <\/td>


\n

Only necessary if the LDAP host is not reachable under the given LDAP Domain.<\/p>
\n <\/td>\n<\/tr>\n


\n

Port<\/p>
\n <\/td>


\n

Leave empty to use Standard Port (389 or 636 for SSL)<\/p>
\n <\/td>\n<\/tr>\n


\n

Username<\/p>
\n <\/td>


\n

E.g. CN=John,OU=Users,DC=EXAMPLE,DC=COM Note: Most systems require the username in this format and do not accept \u201cJohn\u201d as Username<\/p>
\n <\/td>\n<\/tr>\n


\n

Password<\/p>
\n <\/td>

<\/td>\n<\/tr>\n

\n

Confirm Password<\/p>
\n <\/td>

<\/td>\n<\/tr>\n

\n

Connection Security<\/p>
\n <\/td>


\n

Note: when using SSL or TLS, the certificate of the Active Directory will be checked. If this is self-signed you have to add the root CA to the trust storage of the OnPremise Machine. If you are on Cloud the Active Directory has to provide a trusted certificate or the connection will only work with no Encryption<\/p>
\n <\/td>\n<\/tr>\n


\n

Automatic Sync.<\/p>
\n <\/td>


\n

Enables the automatic synchronization of the LDAP directory in the time interval specified in the general LDAP settings.<\/p>
\n <\/td>\n<\/tr>\n


\n

Base DN<\/p>
\n <\/td>


\n

If you don’t want to synchronize the whole directory, you can specify an OU here.E.g. OU=AndroidUsers,OU=Users,DC=EXAMPLE,DC=COM<\/p>
\n <\/td>\n<\/tr>\n


\n

Member of<\/p>
\n <\/td>


\n

All imported users will be added to the selected group<\/p>
\n <\/td>\n<\/tr>\n


\n

Only activated users?<\/p>
\n <\/td>


\n

When enabled, the attribute userAccountControl will be considered, users without that attribute won’t be imported.<\/p>
\n <\/td>\n<\/tr>\n


\n

LDAP Filter<\/p>
\n <\/td>


\n

You can use LDAP Filter to filter which Users get imported<\/p>
\n <\/td>\n<\/tr>\n


\n

Regex Filter<\/p>
\n <\/td>


\n

You can use Regex Filter to filter which Users get imported<\/p>
\n <\/td>\n<\/tr>\n


\n

Test Connection<\/p>
\n <\/td>


\n

Tests the connection when saving the configuration<\/p>
\n <\/td>\n<\/tr>\n


\n

Reset directory structure on sync?<\/p>
\n <\/td>


\n

If true all LDAP entries will be moved back to their original location in the LDAP tree. Recommended to be enabled.<\/p>
\n <\/td>\n<\/tr>\n


\n

Re-import deleted users and groups?<\/p>
\n <\/td>


\n

When enabled, users and groups that have been deleted will be recreated. Recommended to be enabled.<\/p>
\n <\/td>\n<\/tr>\n


\n

Sync deletions?<\/p>
\n <\/td>


\n

When enabled, groups and users will be deleted when they are deleted on the LDAP server. Also devices of deleted users will be deleted.<\/p>
\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n

Below the list of your LDAP Configurations you can define the period in which the system sync automatically. Only uses the LDAP Configurations for automatic sync which have the according option activated.<\/p>\n\n\n\n

<\/div>\n","protected":false},"parent":465,"menu_order":0,"template":"","class_list":["post-467","knowledgebase","type-knowledgebase","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/kb.apptec360.com\/manual\/wp-json\/wp\/v2\/knowledgebase\/467","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kb.apptec360.com\/manual\/wp-json\/wp\/v2\/knowledgebase"}],"about":[{"href":"https:\/\/kb.apptec360.com\/manual\/wp-json\/wp\/v2\/types\/knowledgebase"}],"version-history":[{"count":5,"href":"https:\/\/kb.apptec360.com\/manual\/wp-json\/wp\/v2\/knowledgebase\/467\/revisions"}],"predecessor-version":[{"id":6531,"href":"https:\/\/kb.apptec360.com\/manual\/wp-json\/wp\/v2\/knowledgebase\/467\/revisions\/6531"}],"up":[{"embeddable":true,"href":"https:\/\/kb.apptec360.com\/manual\/wp-json\/wp\/v2\/knowledgebase\/465"}],"wp:attachment":[{"href":"https:\/\/kb.apptec360.com\/manual\/wp-json\/wp\/v2\/media?parent=467"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}