LDAP Settings

XCO supports Lightweight Directory Access Protocol (LDAP). The Settings page in the user interface allows viewing and managing of LDAP server configurations.

LDAP is an open-source protocol used for centralized authentication through directory service. If the configured LDAP servers decline to authorize the user, the other authentication methods are attempted in the order they are configured.

Active Directory (AD) is a directory service that supports a number of standardized protocols such as LDAP, Kerberos authentication, and Domain Name Server (DNS), to provide various network services. AD uses a structured data store as the basis for a logical, hierarchical organization of directory information. AD includes user profiles and groups as part of directory information, so it can be used as a centralized database for authenticating third-party resources.

XCO supports the following LDAP methods to authenticate users:

• The user role is included directly as an attribute in the user definition entry.
• The user has the memberOf entry or any appropriate group definition attribute to identify the groups assigned.
• The user entries are present in the LDAP group definition.
• If the user entry is not present or not mapped to the correct predefined role in XCO, the user login fails. For more information, see Map an LDAP User Role.

Note

If LDAP group definition methods are used for user authentication, the corresponding LDAP group must be mapped to an user role in XCO.

• XCO supports a maximum of five LDAP servers.
• The LDAP configuration name must be unique for configuring the authentication policy.