This section contains the LDAP connection configurations required for users to be able to log in to the Apinizer Management Console by integrating with identity management systems that exist in their organizations and are accessible via LDAP connection. With these settings, users can log in to the Apinizer Management Console with their username and password on the LDAP connection and access projects authorized through LDAP groups.
Editing Settings
Click the Management → System Settings → LDAP Settings button. An image containing LDAP login settings is shown below:
| Field | Description |
|---|---|
| Name | Name information is entered for LDAP Settings. |
| Execution Order | The execution order of LDAP Settings is determined. The execution order is prioritized according to this order. |
| LDAP Connection (LDAP Connection) | LDAP Connection is selected or a new one is created for LDAP Settings. |
| User Object Class Definition (User Object Class Definition) | User class is created to filter LDAP Users. |
| Group Object Class Definition (Group Object Class Definition) | Group is created to filter LDAP classes. |
User Object Class Definition
Class name(s) to be used to filter users are entered. These class names are used to identify specific user objects and play an active role in filtering operations. An image containing login settings to filter users is shown below:
| Field | Description |
|---|---|
| User Object Class Names (User Object Class Names) | Class name(s) to be used to filter users are entered. |
| Custom Filter Attribute (Custom Filter Attribute) | Filter value that can be used in addition to the filter in the connection when retrieving users is entered. |
| User Base DN Attribute (User Base DN Attribute) | If this value is filled, this Base DN is used when searching and loading users instead of the Base DN in the connection. If no value is provided, the Base DN in the connection becomes valid. |
| Search Scope (Search Scope) | Specifies at what level the search operation will be performed on the base dn. |
| Full Name Attribute (Full Name Attribute) | The name of the attribute to be used to find the user’s full name is entered. |
| Login Name Attribute (Login Name Attribute) | The name of the attribute (login name) to be used for the user’s system login is entered. |
| First Name Attribute (First Name Attribute) | The name of the attribute indicating the user’s first name is entered. |
| Last Name Attribute (Last Name Attribute) | The name of the attribute indicating the user’s last name is entered. |
| E-Mail Attribute (E-Mail Attribute) | The name of the attribute indicating the user’s e-mail address is entered. |
| Membership Attribute (Membership Attribute) | The name of the attribute indicating the user’s group memberships is entered. |
Group Object Class Definition
Specifies the class name to be used to filter groups. An image containing login settings to filter group classes is shown below:
| Field | Description |
|---|---|
| Group Object Class Name (Group Object Class Name) | The class name to be used to filter groups is entered. |
| Custom Filter Attribute (Custom Filter Attribute) | Filter value that can be used in addition to the filter in the connection when retrieving groups. |
| Group Base DN Attribute (Group Base DN Attribute) | If there is a value in this field, this Base DN is used when searching and loading groups instead of the Base DN in the connection. If no value is provided, the Base DN in the connection becomes valid. |
| Search Scope (Search Scope) | Specifies at what level the search operation will be performed on the base dn. |
| Group Name Attribute (Group Name Attribute) | The name of the attribute that holds the group name is entered. |
| Member Attribute (Member Attribute) | The name of the attribute that holds group members is entered. |
| Member Strategy (Member Strategy) | The method to be used to determine group members is selected. |
To see an example scenario for the real-world use of these settings, visit the API Manager LDAP Integration page.