Excerpt |
---|
The LDAP Organizational Identity Source Plugin is designed to integrate with an LDAP server. |
Modes
Section |
---|
Column |
---|
Org Identity Source Mode | Support |
---|
Manual Search and Linking | Supported | Enrollment, Authenticated | Not supported | Enrollment, Claim | Not supported | Enrollment, Search | Supported | Enrollment, Select | Supported |
|
Column |
---|
Org Identity Sync Mode | Support |
---|
Full | Supported, with restrictions | Query | Supported | Update | Supported | Manual | Supported |
|
|
Installation
This is a non-core plugin, see Installing and Enabling Registry Plugins for more information.
...
The following attributes are currently supported by LdapSource:
LDAP Attribute | Org Identity Source Attribute |
---|
edupersonaffiliation | Affiliation |
employeenumber | Identifier/identifier, type=Enterprise |
givenname | Name/given, type=Official |
l | Address/locality, type=Office |
mail | EmailAddress/mail, type=Official, verified |
o | o |
ou | ou |
postalcode | Address/postal_code, type=Office |
sn | Name/family, type=Official |
st | Address/state, type=Office |
street | Address/street, type=Office |
telephonenumber | TelephoneNumber/number, type=Office |
title | title |
Constraints
Full syncs are dependent on the LDAP server having sufficiently high search limits to allow the full directory to be read, or for binding to be performed with a Bind DN with unlimited search permission.
...