How to Configure LDAP Login

LDAP login can be configured on the Directory Access Settings tab of the System module.

1. Once on the tab, use the drop-down below LDAP Server Settings to select or add a new LDAP server.
   Once there is at least one available LDAP server, the LDAP Login Settings and the LDAP Synchronization Settings panels appear.
2. In the LDAP Login Settings panel, activate the Use for login switch. Switching this feature ON prompts the necessary data fields to be displayed.
3. Select the desired authentication mode:
   

   Use full DN - searches for the user directly by the user's full distinguished name (optionally specified by prefix and/ or postfix)

   Resolve sAMAccountName - authenticates the user through a specified query user (query user name, password and base can be determined), that is, no full DN has to be provided

   NOTE: In this case, DN data is not stored in LearningSpace, but only the sAMAccountName which will first have to be resolved to the full DN by the query user. The specified query user needs to have permission to search within the query base.
4. Provide the DN or Query data respectively.
5. Click the Test LDAP Login button to check whether everything has been set up correctly.

If there is at least one LDAP server configured for login, LDAP authentication can be set up for users independently in the Edit User pop-up window:

1. On the Accounts tab (displayed by default when the pop-up is opened), check the box at Authenticate by LDAP server.

2. Type the server-side user ID in the LDAP ID field.

Similarly, if there is at least one LDAP server configured for login, LDAP synchronization can be enabled on the LDAP tab of the Edit Group pop-up window.