Difference between revisions of "Common: LDAP Settings"

From AgileApps Support Wiki
imported>Aeric
imported>Aeric
m (moved Common:SAML LDAP Settings to Common: LDAP Settings: SAML on this page is misleading, since this is an LDAP configuration page)
 
(3 intermediate revisions by the same user not shown)
Line 1: Line 1:
::<hr width="500">
:* '''Default Team -''' A new user's default [[Team]].
:* '''Default Team -''' A new user's default [[Team]].
::: ''The team assignment can be changed in the platform after the user logs in.''
::: ''The team assignment can be changed in the platform after the user logs in.''
Line 8: Line 10:
::: ''The user's access profile is fully determined by the configuration.''
::: ''The user's access profile is fully determined by the configuration.''


:* '''Attribute for Access Profile -''' The name of the field that designates the user's access profile.
:* '''LDAP Attribute for Access Profile -''' The name of the LDAP attribute that designates the user's access profile.
::: The attribute must contain an access profile's ''record ID''.
::: The attribute must contain an access profile's ''record ID''.
::: To get a record ID:
::: To get a record ID:
Line 22: Line 24:
::::b. You can then use the [[Application Access]] page to specify the applications the user can access.
::::b. You can then use the [[Application Access]] page to specify the applications the user can access.


:* '''Attribute for Application -''' The name of the field that designates the user's application.  
:* '''LDAP Attribute for Application -''' The name of the LDAP attribute that designates the user's application.  
::: The attribute must contain the application's ''record ID''.
::: The attribute must contain the application's ''record ID''.
::: To get a record ID:
::: To get a record ID:
Line 33: Line 35:
:::: The user can change it in their [[Personal Settings]]. An admin can do so in the [[Users]] page.
:::: The user can change it in their [[Personal Settings]]. An admin can do so in the [[Users]] page.


:* '''Attribute for Role -''' The name of the field that designates the user's role in the application.  
:* '''LDAP Attribute for Role -''' The name of the LDAP attribute that designates the user's role in the application.  
::: The attribute must contain the role's ''record ID''.
::: The attribute must contain the role's ''record ID''.
::: To get a record ID:
::: To get a record ID:
Line 39: Line 41:
::::b. Go to '''[[File:GearIcon.png]] > Customization > Application Roles'''
::::b. Go to '''[[File:GearIcon.png]] > Customization > Application Roles'''
::::c. [[Modify the view to display Record IDs]], and copy the ones you need.
::::c. [[Modify the view to display Record IDs]], and copy the ones you need.
<noinclude___NOINDEX__</noinclude>
<noinclude>___NOINDEX__</noinclude>

Latest revision as of 11:28, 23 December 2020


  • Default Team - A new user's default Team.
The team assignment can be changed in the platform after the user logs in.
The user can change it in their Personal Settings. An admin can do so in the Users page.

The user's access profile is fully determined by the configuration.
  • LDAP Attribute for Access Profile - The name of the LDAP attribute that designates the user's access profile.
The attribute must contain an access profile's record ID.
To get a record ID:
a. Go to GearIcon.png > Access Management > Access Profiles
b. Modify the view to display Record IDs, and copy the ones you need.

  • Default Application - The initial Application the user sees when they log in.
That setting can be changed in the platform after the user logs in.
The user can change it in their Personal Settings. An admin can do so in the Users page.
To grant access to additional applications:
a. When the user logs in, a User record is created for them in the platform.
b. You can then use the Application Access page to specify the applications the user can access.
  • LDAP Attribute for Application - The name of the LDAP attribute that designates the user's application.
The attribute must contain the application's record ID.
To get a record ID:
a. Go to GearIcon.png > Access Management > Application Access
b. Modify the view to display Record IDs, and copy the ones you need.

  • Default Role - The new user's Role in the application.
That setting can be changed in the platform after the user logs in.
The user can change it in their Personal Settings. An admin can do so in the Users page.
  • LDAP Attribute for Role - The name of the LDAP attribute that designates the user's role in the application.
The attribute must contain the role's record ID.
To get a record ID:
a. Open the application, if it is not already running.
b. Go to GearIcon.png > Customization > Application Roles
c. Modify the view to display Record IDs, and copy the ones you need.

_