Sign users in with AD, LDAP or an HTTP API
To check passwords against your own directory, open Manage Domain(s), expand your domain and click Policy. In the Third Party Authentication box choose AD, LDAP or HTTP API, fill the server details, test the connection with a real user, and click Save. Choose No Authentication to go back to XgenPlus passwords.
How to sign users in with ad, ldap or an http api
Where: Admin console › Manage Domain(s) › your domain › Policy › Third Party Authentication
- Open Manage Domain(s), expand your domain and click Policy.
- In Third Party Authentication, select AD, LDAP or HTTP API.
- Fill the server details shown for that choice and pick the Authentication Scheme.
- Type a real user's name and password in the test boxes and click Test Ldap connection (or Test HTTP connection).
- When the test succeeds, decide about local password caching, then click Save at the bottom of the page.
Choose how passwords are checked
| Choice | Meaning |
|---|---|
| AD | Passwords are checked against your Active Directory server. |
| LDAP | Passwords are checked against your LDAP server. The scheme is fixed to UserName. |
| HTTP API | Passwords are checked by a web address you provide. |
| No Authentication | No outside check. XgenPlus checks passwords itself. |
Fields for AD and LDAP
| Field | What it does |
|---|---|
| Authentication Scheme | UserName@DomainName or UserName: what users type to identify themselves to the directory. |
| IP and PORT | Address and port of the directory server. Both are needed for the test. |
| SSL | Yes to connect over SSL. |
| Basedn and Rootdn | The search base and root of your directory. |
| UserAdmin and UserPass | An account that is allowed to search the directory. |
| Properties | Extra connection properties, if your directory needs them. |
| AuthType | Only Simple is offered. |
Fields for HTTP API
For HTTP API only the URL field is shown. XgenPlus sends the user name and password to that address when someone signs in. The service must answer that the password is valid or not.
Test and cache
| Item | What it does |
|---|---|
| User name and Password test boxes | Enter an existing directory user. Both are required. |
| Test Ldap connection / Test HTTP connection | Tries to sign that user in with the details above and shows the result beside the button. |
| Cache Password Locally after first authentication | After a successful AD or LDAP test, a Yes / No switch appears. When on, XgenPlus keeps the password locally after the first successful sign-in. |
| Use password for Primary Authentication from | Appears when caching is on. Choose LDAP or DB. The line beside it shows the other one as the secondary check. |
Example
Anita at
acme.inwants staff to use their office computer password for mail. She selects AD, fills the directory address and port, tests with her own account and, when the test succeeds, clicks Save.
Good to know
- You must choose one of the options before testing. Otherwise a message asks you to select the third party authentication first.
- Testing does not save anything. Click Save to keep the settings.
- The test needs a user name and password. Without them the page asks for both.
Common questions
How do I stop using my directory?
Select No Authentication and click Save. Users then sign in with their XgenPlus password again.
The test fails. What should I check?
Check the address, port and SSL setting, the Basedn and administrator details, and that the user name and password you typed in the test boxes are valid on your directory.