LDAP

Overview

LDAP settings can be configured and managed from Setup > Active Directory > LDAP.

See the image below for how to access the LDAP page:Ex. LDAP Menu

Add or Modify an LDAP connection

This page allows for creating and managing Station-specific, local or Azure-hosted AD environments and connections.

See image below for an example:

Local LDAP

Perform the following steps to add a new Local LDAP connection:

1.  Click on the Page icon or select an LDAP connection from the list by clicking on the checkbox to its left, then click the Wrench Icon.
2.  Add the following parameters:
   
   1. AD Type - Select the Local configuration form.
   2. Station - The station that the LDAP will be associated with.
   3. LDAP Path - Path to the server for LDAP.
   4. LDAP Domain - The domain of the LDAP server.
   5. External Domain - DNS domain for the LDAP server.
   6. Auth Service URL - URL and port to get authentication information.
   7. User Name - User Account ID used to access the AD Instance.
   8. Password - Password used to access the AD instance.
   9. Confirm Password - Retype the AD account password exactly to confirm accuracy.
   10. Synchronize Mode - Indicates if the AD connection is established via web service or directly.
   11. Enable SSL - Indicates if the LDAP connection is secured with SSL.

Azure LDAP

Perform the following steps to add a new Local LDAP connection:

1. Create a new registration for tokenized access to Microsoft Graph and add full read permissions to Azure Active Directory.
2. Create a new App Registration in Azure Active Directory.
3. On the Certificates and secrets page, select New client secret, enter a description, select Expiry rule and click Add.
   
   Caution:

   Remember to Copy the secret's value before leaving the page, it will only be viewable once.
4. On the API permissions page, click Add a Permission > Microsoft Graph > Application Permission, and select Directory > Directory.Read.All.
5. If Admin consent is required, follow the on-screen instructions to grant consent.
6. In Getac Enterprise, Click on the Page icon or select an LDAP connection from the list by clicking on the checkbox to its left, then click the Wrench Icon.
7.  Add the following parameters:
   
   1. AD Type - Select the Local configuration form.
   2. Station - The station that the LDAP will be associated with.
   3. Application Client ID - The unique identifier, provided by Azure, for the a AD instance.
   4. Directory Tenant ID - The unique identifier, provided by Azure, for the Azure customer (Tenant).
   5. Client Secret ID - Password String for the Azure AD connection.