Difference between revisions of "Common: LDAP Settings"

From AgileApps Support Wiki
imported>Aeric
(Created page with ":* '''Default Team -''' A new user's default Team. ::: ''The team assignment can be changed in the platform after the user logs in.'' :::: The user can change it in their [[P...")
 
imported>Aeric
m (moved Common:SAML LDAP Settings to Common: LDAP Settings: SAML on this page is misleading, since this is an LDAP configuration page)
 
(4 intermediate revisions by the same user not shown)
Line 1: Line 1:
::<hr width="500">
:* '''Default Team -''' A new user's default [[Team]].
:* '''Default Team -''' A new user's default [[Team]].
::: ''The team assignment can be changed in the platform after the user logs in.''
::: ''The team assignment can be changed in the platform after the user logs in.''
Line 6: Line 8:
::<hr width="500">
::<hr width="500">
:* '''Default Access Profile -''' A new user's default [[Access Profile]].
:* '''Default Access Profile -''' A new user's default [[Access Profile]].
::: ''The user's access profile is fully determined by the LDAP configuration.''
::: ''The user's access profile is fully determined by the configuration.''
:* '''LDAP Attribute for Access Profile -''' The name of an LDAP field that designates the user's access profile.
 
::: The LDAP attribute must contain an access profile's ''record ID''.
:* '''LDAP Attribute for Access Profile -''' The name of the LDAP attribute that designates the user's access profile.
::: The attribute must contain an access profile's ''record ID''.
::: To get a record ID:
::: To get a record ID:
::::a. Go to '''[[File:GearIcon.png]] > Access Management > Access Profiles'''
::::a. Go to '''[[File:GearIcon.png]] > Access Management > Access Profiles'''
Line 20: Line 23:
::::a. When the user logs in, a User record is created for them in the platform.
::::a. When the user logs in, a User record is created for them in the platform.
::::b. You can then use the [[Application Access]] page to specify the applications the user can access.
::::b. You can then use the [[Application Access]] page to specify the applications the user can access.
:* '''LDAP Attribute for Application -''' The name of an LDAP field that designates the user's application.  
 
::: The LDAP attribute must contain the application's ''record ID''.
:* '''LDAP Attribute for Application -''' The name of the LDAP attribute that designates the user's application.  
::: The attribute must contain the application's ''record ID''.
::: To get a record ID:
::: To get a record ID:
::::a. Go to '''[[File:GearIcon.png]] > Access Management > Application Access'''
::::a. Go to '''[[File:GearIcon.png]] > Access Management > Application Access'''
Line 30: Line 34:
:::''That setting can be changed in the platform after the user logs in.''
:::''That setting can be changed in the platform after the user logs in.''
:::: The user can change it in their [[Personal Settings]]. An admin can do so in the [[Users]] page.
:::: The user can change it in their [[Personal Settings]]. An admin can do so in the [[Users]] page.
:* '''LDAP Attribute for Role -''' The name of an LDAP field that designates the user's role in the application.  
 
::: The LDAP attribute must contain the role's ''record ID''.
:* '''LDAP Attribute for Role -''' The name of the LDAP attribute that designates the user's role in the application.  
::: The attribute must contain the role's ''record ID''.
::: To get a record ID:
::: To get a record ID:
::::a. Open the application, if it is not already running.
::::a. Open the application, if it is not already running.
::::b. Go to '''[[File:GearIcon.png]] > Customization > Application Roles'''
::::b. Go to '''[[File:GearIcon.png]] > Customization > Application Roles'''
::::c. [[Modify the view to display Record IDs]], and copy the ones you need.
::::c. [[Modify the view to display Record IDs]], and copy the ones you need.
<noinclude>___NOINDEX__</noinclude>

Latest revision as of 11:28, 23 December 2020


  • Default Team - A new user's default Team.
The team assignment can be changed in the platform after the user logs in.
The user can change it in their Personal Settings. An admin can do so in the Users page.

The user's access profile is fully determined by the configuration.
  • LDAP Attribute for Access Profile - The name of the LDAP attribute that designates the user's access profile.
The attribute must contain an access profile's record ID.
To get a record ID:
a. Go to GearIcon.png > Access Management > Access Profiles
b. Modify the view to display Record IDs, and copy the ones you need.

  • Default Application - The initial Application the user sees when they log in.
That setting can be changed in the platform after the user logs in.
The user can change it in their Personal Settings. An admin can do so in the Users page.
To grant access to additional applications:
a. When the user logs in, a User record is created for them in the platform.
b. You can then use the Application Access page to specify the applications the user can access.
  • LDAP Attribute for Application - The name of the LDAP attribute that designates the user's application.
The attribute must contain the application's record ID.
To get a record ID:
a. Go to GearIcon.png > Access Management > Application Access
b. Modify the view to display Record IDs, and copy the ones you need.

  • Default Role - The new user's Role in the application.
That setting can be changed in the platform after the user logs in.
The user can change it in their Personal Settings. An admin can do so in the Users page.
  • LDAP Attribute for Role - The name of the LDAP attribute that designates the user's role in the application.
The attribute must contain the role's record ID.
To get a record ID:
a. Open the application, if it is not already running.
b. Go to GearIcon.png > Customization > Application Roles
c. Modify the view to display Record IDs, and copy the ones you need.

_