LDAP and Active Directory
Using a LDAP or Active Directory Data Source for Single Sign-on
DeployHub allows you to use LDAP or Active Directory to manage your User logins. Create an LDAP Data Source to access an LDAP database and use the information stored to gain access to DeployHub. It also populates the Users General tab with Real Name and Email, which it gets from the LDAP database. When you define a User, you associate the LDAP authentication method. At login, DeployHub checks the User’s authentication method to determine if LDAP or Active Directory should be used.
Creating a LDAP or Active Directory Data Source
To support LDAP integration, you must create an LDAP Credential whose Username value is a user ID (uid) followed by the necessary Ldap domain components (dc), all comma delimited (i.e., uid=mycompany,dc=example,dc=com). The Credential’s Password field contains the password for the user in the LDAP directory. For more on creating Credentials see Create Your Credentials.
The Data Source has specific parameters used to validate a User:
| Field | Description |
|---|---|
| LDAP Server | I.P. address or hostname of the LDAP Server. The address of the LDAP server, which can include the port (i.e., ldap://ldap.forumsys.com:389). If the port isn’t included, it can be put separately into the Port Number parameter. |
| LDAP Server Encrypted | Select the box to indicate if the LDAP Server should be hidden in the database. |
| LDAP Server Override | Select the box if the LDAP Server can be changed. |
| Active Directory Domain | Enter the name of the Active Directory Domain within the LDAP Server. |
| Active Directory Encrypted | Select the box to indicate if the Active Directory Domain Name should be hidden in the database. |
| Active Directory Override | Select the box if the Active Directory Domain Name can be changed. |
| Port Number | The port on which the LDAP server is listening. |
| Port Number Encrypted | Select the box to indicate if the Port Number should be hidden in the database. |
| Port Number Override | Select the box if the Port Number can be changed. |
| Search Base | The search base defines the starting point for the search in the LDAP directory tree.Enter the search base (the distinguished name of the search base object) that defines the location in the directory from which the LDAP search begins (i.e., dc=example,dc=com). |
| Search Base Encrypted | Select the box to indicate if the Search Base should be hidden in the database. |
| Search Base Override | Select the box if the Search Base can be changed. |
| Search Filter | Always (uid=$USERNAME) (include parenthesis), as this locates the user within the LDAP database using the Username that was entered into the DeployHub Credential. These filters are used for selecting which objects are returned when browsing for the search base. They identify which objects in your directory are examined, for example email address attributes or user attributes. |
| Search Filter Encrypted | Select the box to indicate if the Search Filter should be hidden in the database. |
| Search Filter Override | Select the box if the Search Filter can be changed. |
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.