LDAP / AD SSO

This guide shows how an LDAP / AD SSO is performed

1 min read

General

You can connect Famedly with an existing LDAP or Active Directory. After successful login, Famedly will create a user account and link it to the LDAP account.


How does it work?

When you connect an LDAP server to Famedly, the login process works as follows:

  1. Famedly attempts to establish a connection to the LDAP server according to the configuration.
  1. If the connection fails, the next server from the configuration is automatically used (if multiple servers have been configured).
  1. Famedly attempts a binding with the BindDN and BindPassword to check if proceeding is possible.
  1. Famedly performs a SearchQuery to find the UserDN using the provided configuration of base, filters, and object classes.
  1. Famedly attempts a binding with the provided login name and password.
  1. LDAP attributes are mapped to Famedly attributes according to the configuration, and a user account is created.


Requirements

For a login to work, the following requirements must be met:

  • Accessibility via Internet and TLS
  • Service account for Famedly with appropriate permissions

Did this answer your question?