Difference between revisions of "Common: LDAP Settings"

From AgileApps Support Wiki
imported>Aeric
imported>Aeric
Line 1: Line 1:
:* '''Attribute for First Name -''' The name of the SAML attribute that designates the user's first name.
:* '''Attribute for Last Name -''' The name of the SAML attribute that designates the user's last name.
:* '''Attribute for Email -''' The name of the SAML attribute that designates the user's email address.
::<hr width="500">
:* '''Default Team -''' A new user's default [[Team]].
:* '''Default Team -''' A new user's default [[Team]].
::: ''The team assignment can be changed in the platform after the user logs in.''
::: ''The team assignment can be changed in the platform after the user logs in.''
Line 8: Line 13:
::: ''The user's access profile is fully determined by the configuration.''
::: ''The user's access profile is fully determined by the configuration.''


:* '''Attribute for Access Profile -''' The name of the field that designates the user's access profile.
:* '''Attribute for Access Profile -''' The name of the SAML attribute that designates the user's access profile.
::: The attribute must contain an access profile's ''record ID''.
::: The attribute must contain an access profile's ''record ID''.
::: To get a record ID:
::: To get a record ID:
Line 22: Line 27:
::::b. You can then use the [[Application Access]] page to specify the applications the user can access.
::::b. You can then use the [[Application Access]] page to specify the applications the user can access.


:* '''Attribute for Application -''' The name of the field that designates the user's application.  
:* '''Attribute for Application -''' The name of the SAML attribute that designates the user's application.  
::: The attribute must contain the application's ''record ID''.
::: The attribute must contain the application's ''record ID''.
::: To get a record ID:
::: To get a record ID:
Line 33: Line 38:
:::: The user can change it in their [[Personal Settings]]. An admin can do so in the [[Users]] page.
:::: The user can change it in their [[Personal Settings]]. An admin can do so in the [[Users]] page.


:* '''Attribute for Role -''' The name of the field that designates the user's role in the application.  
:* '''Attribute for Role -''' The name of the SAML attribute that designates the user's role in the application.  
::: The attribute must contain the role's ''record ID''.
::: The attribute must contain the role's ''record ID''.
::: To get a record ID:
::: To get a record ID:

Revision as of 19:36, 13 October 2015

  • Attribute for First Name - The name of the SAML attribute that designates the user's first name.
  • Attribute for Last Name - The name of the SAML attribute that designates the user's last name.
  • Attribute for Email - The name of the SAML attribute that designates the user's email address.

  • Default Team - A new user's default Team.
The team assignment can be changed in the platform after the user logs in.
The user can change it in their Personal Settings. An admin can do so in the Users page.

The user's access profile is fully determined by the configuration.
  • Attribute for Access Profile - The name of the SAML attribute that designates the user's access profile.
The attribute must contain an access profile's record ID.
To get a record ID:
a. Go to GearIcon.png > Access Management > Access Profiles
b. Modify the view to display Record IDs, and copy the ones you need.

  • Default Application - The initial Application the user sees when they log in.
That setting can be changed in the platform after the user logs in.
The user can change it in their Personal Settings. An admin can do so in the Users page.
To grant access to additional applications:
a. When the user logs in, a User record is created for them in the platform.
b. You can then use the Application Access page to specify the applications the user can access.
  • Attribute for Application - The name of the SAML attribute that designates the user's application.
The attribute must contain the application's record ID.
To get a record ID:
a. Go to GearIcon.png > Access Management > Application Access
b. Modify the view to display Record IDs, and copy the ones you need.

  • Default Role - The new user's Role in the application.
That setting can be changed in the platform after the user logs in.
The user can change it in their Personal Settings. An admin can do so in the Users page.
  • Attribute for Role - The name of the SAML attribute that designates the user's role in the application.
The attribute must contain the role's record ID.
To get a record ID:
a. Open the application, if it is not already running.
b. Go to GearIcon.png > Customization > Application Roles
c. Modify the view to display Record IDs, and copy the ones you need.

_