Configuring LDAP access for user provisioning

You can configure access to your LDAP server to import LDAP user information when you create users in IBM OpenPages® with Watson™.

Before you begin

To configure LDAP access for user provisioning, you must be a member of the OPAdministrators user group and have the following application permission; All Permissions > SOX > Administration > LDAP Server.

If you are using LDAP over SSL/TLS, complete the preconfiguration task first.

Procedure

  1. Click Administration menu > Users and Security > User LDAP Configuration.
  2. Click New.
  3. Type a name for the LDAP configuration.

    You can configure multiple LDAP servers. When you use multiple servers, the Create User page shows the search results from all LDAP servers. The maximum number of search results displayed on the page is the sum total of the maximum results configured for each LDAP server.

  4. In the Provider URL field, type the LDAP service provider that you want to use.

    The value must be a URL string, such as ldap://<hostname>:389.

    Or, if you are using SSL/TLS: ldaps://<hostname>:636
    Note: If you are using LDAP over SSL/TLS, you need to do some additional preconfiguration steps.
  5. Enter the values for your LDAP server. For information about a field, click the field.
    Required fields have a red * next to the field name.
    In the First name attribute, Middle name attribute, and Last name attribute fields, type the attribute names that you want to map to the OpenPages user's given name, middle name, and surname.
    Note: The middle name is not displayed in OpenPages by default. You might want to display it so that you can differentiate users who have the same given name and surname. To display the middle name in the search results of the Create User page, add the following code to Application Text > Formats > com.display.name.format: %MN. For more information, see Modifying how the names of users are displayed. The middle name is not stored in OpenPages.
  6. Click Validate.

    If a required field is missing or contains an incorrect value, a message is displayed.

  7. After you successfully validate the information, click Save.