LDAP Login Settings

You can configure login to Apinizer Management Console with LDAP identity management system and create user and group class definitions. You can configure LDAP connection configurations and integrate with enterprise identity systems.

This section contains the LDAP connection configurations required for users to be able to log in to the Apinizer Management Console by integrating with identity management systems that exist in their organizations and are accessible via LDAP connection. With these settings, users can log in to the Apinizer Management Console with their username and password on the LDAP connection and access projects authorized through LDAP groups.

Editing Settings

Click the Management → System Settings → LDAP Settings button.

An image containing LDAP login settings is shown below:

The fields used for LDAP login settings are shown in the table below.

Field	Description
Name	Name information is entered for LDAP Settings.
Execution Order	The execution order of LDAP Settings is determined. The execution order is prioritized according to this order.
LDAP Connection (LDAP Connection)	LDAP Connection is selected or a new one is created for LDAP Settings.
User Object Class Definition (User Object Class Definition)	User class is created to filter LDAP Users.
Group Object Class Definition (Group Object Class Definition)	Group is created to filter LDAP classes.

User Object Class Definition

Class name(s) to be used to filter users are entered. These class names are used to identify specific user objects and play an active role in filtering operations.

An image containing login settings to filter users is shown below:

The fields used for LDAP user object class definition login settings are shown in the table below.

Field	Description
User Object Class Names (User Object Class Names)	Class name(s) to be used to filter users are entered.
Custom Filter Attribute (Custom Filter Attribute)	Filter value that can be used in addition to the filter in the connection when retrieving users is entered.
User Base DN Attribute (User Base DN Attribute)	If this value is filled, this Base DN is used when searching and loading users instead of the Base DN in the connection. If no value is provided, the Base DN in the connection becomes valid.
Search Scope (Search Scope)	Specifies at what level the search operation will be performed on the base dn.
Full Name Attribute (Full Name Attribute)	The name of the attribute to be used to find the user’s full name is entered.
Login Name Attribute (Login Name Attribute)	The name of the attribute (login name) to be used for the user’s system login is entered.
First Name Attribute (First Name Attribute)	The name of the attribute indicating the user’s first name is entered.
Last Name Attribute (Last Name Attribute)	The name of the attribute indicating the user’s last name is entered.
E-Mail Attribute (E-Mail Attribute)	The name of the attribute indicating the user’s e-mail address is entered.
Membership Attribute (Membership Attribute)	The name of the attribute indicating the user’s group memberships is entered.

Group Object Class Definition

Specifies the class name to be used to filter groups.

An image containing login settings to filter group classes is shown below:

The fields used for LDAP group object class definition login settings are shown in the table below.

Field	Description
Group Object Class Name (Group Object Class Name)	The class name to be used to filter groups is entered.
Custom Filter Attribute (Custom Filter Attribute)	Filter value that can be used in addition to the filter in the connection when retrieving groups.
Group Base DN Attribute (Group Base DN Attribute)	If there is a value in this field, this Base DN is used when searching and loading groups instead of the Base DN in the connection. If no value is provided, the Base DN in the connection becomes valid.
Search Scope (Search Scope)	Specifies at what level the search operation will be performed on the base dn.
Group Name Attribute (Group Name Attribute)	The name of the attribute that holds the group name is entered.
Member Attribute (Member Attribute)	The name of the attribute that holds group members is entered.
Member Strategy (Member Strategy)	The method to be used to determine group members is selected.

To see an example scenario for the real-world use of these settings, visit the API Manager LDAP Integration page.