This article describes the steps required to configure the Broker to use Active Directory/LDAP as an authentication and user management source.

Prerequisites

• Administrative access to the Admin Console UI
• The following AD/LDAP properties:
  • Hostname and port of the AD/LDAP host
  • Distinguished name of the service account used for binding to the LDAP host
  • Password for the LDAP bind user
  • Distinguished name of the LDAP location to search for users
  • Distinguished name of the LDAP location to search for groups
  • User attribute for mapping
  • Group attribute for mapping

Configure AD/LDAP

1. Log in to the Admin Console UI
2. Navigate to Broker Configuration
   
3. Select the User Authentication tab
   
4. Check the checkbox for LDAP Enabled, and provide the following information
   • LDAP Server URL: Hostname and port of the AD/LDAP host, in the format ldap://<hostname_or_ip>:<port>
   • LDAP Server Bind User Name: Distinguished name of the service account used for binding to the LDAP host, with at least read permissions
   • LDAP Bind Password: Password for the LDAP bind user
   • Search Base DN: Distinguished name of the LDAP location to search for users
   • Group Search Base DN: Distinguished name of the LDAP location to search for groups
   • User Attribute Mapping: User attribute for mapping - for AD, this value is usually userPrincipalName ={0}
   • Group Attribute Mapping: Group attribute for mapping - for AD, this value is usually member={0}
   • Test username: A user which can be used to test the AD/LDAP configuration, in the format <username>@<service_principal_name>
     
5. Click Test Settings
6. A status message indicates that the test was successful
   
7. Re-enter the LDAP Bind Pasword
8. Click Apply Changes
9. A status message indicates that the settings were successfully applied
   
10. Restart the Broker Application Service