Page Comparison

...

1. Deploy Syndeia Cloud according to Intercax Documentation.

2. Read as much of https://ldap.com/learn-about-ldap/ as you need to be fluent in LDAP terms and administration.

3. Test your assumptions about your organization’s LDAP IdP with either of curl or ldapsearch - Syndeia uses a third-party library for LDAP queries and if external, simple LDAP queries do not work, your configuration of Syndeia based on incorrect assumptions is not going to be successful.

   1. Read https://devconnected.com/how-to-search-ldap-using-ldapsearch-examples/

Configure the IdP

• Browse to and authenticate into your organization’s choice of IdP’s administration web site (or LDAP Directory desktop utility such as Azure AD or Apache Directory Studio)

  • In Syndeia Silhouette, this is the ldap.hostname and ldap.port setting

• Enter the integrations management portion of this administration web site

• Find or Create a new LDAP service for the IdP’s users

• Browse the IdP’s LDAP “tree” to discover all of the following

  • The administrator credentials necessary to bind to the LDAP query URL to search the entire tree for groups and users

    • the IdP might grant query rights to anonymous users but often a client user or script has to provide administrator credentials to query the IdP (via LDAP) for the existence of other user identities

    • This is the “Bind Distinguished Name” (Bind DN) and its password

      • In Syndeia Silhouette, this is the ldap.adminUserDN and the ldap.adminPassword

  • The topmost node in the LDAP tree where user identities are stored.

    • This is the “Base Distinguished Name” (Base DN)

      • In Syndeia Silhouette, this is the ldap.baseDN

  • The topmost node in the LDAP tree where groups are defined

• If you are setting up an LDAP service for the organization, you will need to configure the LDAP tree before attempting to integrate Syndeia with the LDAP service.

...