Update ldap-integration.md

extended settings, default role
This commit is contained in:
Roland
2018-10-22 07:20:17 +02:00
committed by GitHub
parent de3c526446
commit 3e3f0b5e68

View File

@@ -1,16 +1,16 @@
<!-- add-breadcrumbs -->
#Setting up LDAP
Lightweight Directory Access Protocol is a centralised access controll system used by many small medium scale organisations.
Lightweight Directory Access Protocol is a centralised access controll system used by many small and medium scale organisations.
By settings up LDAP service, you able to login to ERPNext account by using LDAP credentials.
To setup LDAP,
To setup LDAP, go to
`Explore > Integrations > LDAP Settings`
#### Setup LDAP
To enable ldap service, you need to configure parameters like LDAP Server Url, Organizational Unit, UID, Base Distinguished Name (DN) and Password for Base DN
To enable ldap service, you need to configure parameters like LDAP Server URL (including ldap://), Organizational Unit, UID, Base Distinguished Name (DN) and Password for Base DN
<img class="screenshot" alt="LDAP Settings" src="{{docs_base_url}}/assets/img/setup/integrations/ldap_settings.png">
@@ -19,6 +19,15 @@ After setting up LDAP parameters, on login screen, the system enables **Login Vi
<img class="screenshot" alt="LOGIN via LDAP" src="{{docs_base_url}}/assets/img/setup/integrations/login_via_ldap.png">
For the extended fields, try these settings:
LDAP Search String: uid={0}
LDAP First Name Field: cn
LDAP Email Field: mail
LDAP Username Field: uid
The default role of a new LDAP user is `Blogger`. You might want to adapt the permissions of that role with the permission manager.
#### Connecting to LDAP Securely
In the LDAP Settings area, there are two dropdowns.