Configuring LDAP authentication

By configuring LDAP authentication with Maximo® Application Suite, user authentication is managed by your LDAP server.

1. From the Suite administration menu, select Configurations from the side navigation menu and then click LDAP authentication.
2. In the Identity provider id field, enter a unique identifier for this LDAP provider. Use lowercase alphanumeric characters without spaces (for example, github-ldap or emea-ldap).
3. Select the Visibility option.
   • Visible - The identity provider appears as an option on the login page.
   • Hidden - The identity provider is configured but not displayed on the login page.
4. Specify the LDAP configuration parameters.

   Table 1. LDAP configuration attributes

   Parameter	Details	Example
   URL	The URL for the LDAP server is in the format: protocol://<hostname>:<port> Note: Secure LDAP (LDAPS) is the only allowed protocol. Non-TLS connections are not allowed.	Example: ldaps://MSAD2021.fyre.ibm.com:636
   Base DN	The path in the object hierarchy of the directory server.	Example: OU=FYRE,DC=MSAD2021,DC=fyre,DC=ibm,DC=com
   Bind DN	Bind DN is used to bind to an LDAP server. Administrators must have sufficient privileges to search for users under user search DN or groups under group search DN.	Example: CN=wilson,OU=users,OU=FYRE,DC=MSAD2021,DC=fyre,DC=ibm,DC=com
   Bind PW	LDAP admin password
   userIdMap	The field that is used for user IDs	Example: sAMAccountName

5. Add or retrieve CA certificate.