LDAP Mapping Values

Overview

Lightweight Directory Access Protocol (LDAP) is an open, vendor-neutral, industry-standard application protocol for accessing and maintaining distributed directory information services over an Internet Protocol network. In this article, you will find the attributes used when mapping accounts, profiles, and groups.

Information

After integrating with LDAP, Jive will:

Authenticate users against the configured directory server.
Synchronize groups and group membership information from the directory server.
Sync mapped federated profile fields.

In the following tables, you will find the mapping attributes, values, and notes which will help you to have a better understanding of each one of them.

User Account Mapping

The values are supplied by the customer. You can look at an LDIF to determine the correct value(s).

Setting	Quick things to check/resolve	Notes
Username Field	Supplied by the customer	Required - The attribute name that the username lookups will be performed on. If this property is not set, the default value is `uid`. Active Directory users should try the default value `sAMAccountName`
Email Field	Supplied by the customer	Required - The attribute name that the email lookups will be performed on. If this property is not set, the default value is `mail`.
First Name Field	Supplied by the customer	The attribute name that contains the first name of the user. This attribute is required for the name presentation when the Last Name Field is present. If this property is not set, the default value is `givenName`.
Last Name Field	Supplied by the customer	The attribute name that contains the last name of the user. When present in the LDAP configuration, the last name will be used globally for name lookups in conjunction with the First Name field. If this property is not set, the default value is `sn`.
Photo Field	Supplied by the customer	The attribute name that returns binary data for a photo. Supported binary type_zs are JPEG and PNG. Alternatively, a URL can be returned from which the binary data can be fetched. Common values for this field are `photo` and `jpegPhoto`.
Manager Field	Supplied by the customer	The attribute name that the manager relationship lookups will be performed on. A query against these fields should return a Distinguished Name such as `uid=blumbergh,dc=example,dc=com` which will allow loading of another LDAP user. A common value for this field is `manager`.
User Unique ID Field	Supplied by the customer	The field used to compare local users with remote users in the case of a change of username. It should be a unique identifier for a record in LDAP.
Last Modified Field	Supplied by the customer	The attribute name that contains the last modified date for the user record.
User Disabled Field	Supplied by the customer	The attribute name that contains the attribute whose value can be determined as a flag for disabling the user record.
User Disabled Field Value	Supplied by the customer	The field value which, combined with the user disabled field, can be matched to determine whether or not a user record is disabled.

Profile Field Mapping

Optional profile fields can be mapped here.

Setting	Quick things to check/resolve	Notes
User Filter	Supplied by the customer	An optional user filter to isolate user searches and authentication to a particular set of criteria. An example is `(objectclass=person)`.
User RDN	Supplied by the customer	An optional relative DN (the base DN will be appended automatically) to isolate user searches and authentication to a particular section of an LDAP tree. An example is `OU=Employees`.

Group Mapping

Setting	Quick things to check/resolve	Notes
Group Field	Supplied by the customer	Required - The attribute name that the group name lookups will be performed on. If this property is not set, the default value is `cn`.
Member Field	Supplied by the customer	The attribute name that holds the members in a group. If this property is not set, the default value is `member`.
Description Field	Supplied by the customer	The attribute name that holds the description a group. If this property is not set, the default value is `description`.

User Group Mapping

Setting	Quick things to check/resolve	Notes
Member Field	Supplied by the customer	The attribute name that group lookups will be performed on if configured. This property is on the user object. No default value is set as this is highly dependent on configuration, but a typical value is `memberOf` or `groupmembership`.

Choose files or drag and drop files

Tags:

Was this article helpful?

Yes

Priyanka Bhotika
Posted

Comments

Please sign in to comment