This tab is for defining server settings for LDAP configuration:
CAE LearningSpace Essentials can be connected with directory servers that use the Lightweight Directory Access Protocol (LDAP) to provide you with an efficient way of user authentication and group synchronization.
LDAP synchronization provides possibilities to import and synchronize groups of users based on the data of the selected server.
Available to users with Admin role. |
Go to Directory Access Settings in System, and configure the directory server(s) of your institution (more than one can be added).
See how to use the LDAP Server Settings dropdown. |
Manage further settings such as user authentication methods and synchronization.
Contact your organization’s network administrator or IT professional for the exact details of your directory server. |
Servers set for login have two modes of authentication:
Every user who is a match for the query can log in to CAE LearningSpace with their credentials stored on the directory server.
By applying a query user, you grant CAELearningSpace Essentials permission to search the provided query base and authenticate any user who has a match for their samAccountName.
It is important that the query user has permission to search in the affected LDAP tree. |
See more at How can I configure LDAP login. |
Switch on LDAP synchronization to import users with ease from your directory server(s) into a user group in CAE LearningSpace.
Provide the name and password of the query user (dedicated for synchronization) of your directory server.
See more at How can I complete LDAP synchronization. |
In case of invalid users or missing/incorrect data on your directory server, the system will warn you. Meanwhile, users who are successfully authenticated can still be imported. |
To import users into a group, go to User Manager and edit or create a new group. Select the LDAP tab in the Create / Edit Group pop-up and follow the steps on this page. Only Admin users can import users.
In case your directory server is down, users authenticated by LDAP will be unable to log in with their email and password from the directory server. |