Active Directory (LDAP, SSO, SAML)
Admin can provide access to the Active Directory to import users and groups to the Analytics hub.
Server AD
The system provides an LDAP connection to synchronize users and groups with Server AD. To establish a connection Admin should fill out the form.
| Item | Description | UI |
|---|---|---|
| Host | allows Admin to add a server path, a required field | input field |
| Base DN | allows Admin to add a Base DN path, a required field | input field |
| Username | allows Admin to add a username for an Active Directory user with access to read users' data, a required field | input field |
| Password | allows Admin to add a password for an Active Directory user with access to read users' data, a required field | input field |
| Auto sync | allows Admin to enable/disable auto sync users' data from AD while logging in | switcher |
The Base DN is the starting point an LDAP server uses when searching for users authentication within your Directory
Cloud AD
Additionally, Analytics hub connects with Azure Cloud AD for single-sign-on (SSO) authorization. To establish a connection, the admin should fill in the form with the Azure application credentials for SSO
| Item | Description | UI |
|---|---|---|
| Tenant ID | allows Admin to add a Tenant ID | input field |
| Client ID | allows Admin to add a Client ID | input field |
| Client Secret | allows Admin to add a Client Secret | input field |
| Auto sync | allows Admin to enable/disable auto sync users' data from AD while logging in | switcher |
Single Sign On with SAML
Accton provides a few types to configure SAML for connection Form credentials is consist of:
- Activation block
- Metadata
- Service provider certificate
Activation block
- enable switcher causes the button on the Auth screen to use SSO for authorization in portal
- last updated at data shows the date-time of the last users synchronization
- Accton metadata URL provides ability to download the .xml with certificate and other configuration to use on your side
Metadata block
This area has three available configuration method for SAML. So you can use one of them:
- IDP URL is the web address used for Single Sign-On (SSO) authentication. Directly it is generated in your identity provider's admin console, like Okta, Azure AD, or Google.
- XML config field we can use if you have full configuration file from your auth provider's console. And you can't use the IDP URL method for some reason
- customizable method is the combination of previous two. You should use it if you are able to use IDP URL but with custom settings in configuration .xml
Service provider certificate
For some providers you may need to upload .cert and .pem certificate to ensure trust connection. Use Service provider certificate area for this. You can generate certificate to upload on the service side to validate Accton as a trust requester. We provide the ability to generate own certificate to ensure the secure connection.
This configuration will be considered and included in the .xml format, as mentioned previously