--- title: "LDAP Configurations" slug: "ldap-configurations" updated: 2021-09-27T16:36:50Z published: 2021-09-27T16:36:50Z canonical: "docs.visualvault.com/ldap-configurations" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.visualvault.com/llms.txt > Use this file to discover all available pages before exploring further. # LDAP Configurations ## **Purpose** --- This article reviews the User Administration tool, specifically for LDAP configuration. The User Administration tool is found in the Control Panel under Administration Tools - Users. This screen is utilized to create users, modify users, enable/disable users and delete users. Administrators may also modify the user account for the following properties: - Change user passwords - Administer user groups - Manager supervisor assignment - Update user preferences - Set user and password expiration - View user history - View user task list Only enabled users are counted for licensing or billing purposes. ### **LDAP Capabilities** --- As users are administered within VisualVault, there is the ability to integrate VisualVault with LDAP authentication servers using LDAP Profiles. - After a profile has been set up, administrators can import users into VisualVault. - Passwords for imported users are maintained by the LDAP source. - When integrating with LDAP authentication servers, the user accounts may not be easy to use in the VisualVault interface. - Administrators can change the format used to display user names in the interface. ### **Views and Licensing** --- User licenses in VisualVault are based on the number of enabled User ID's. - Each enabled User ID in the system must have a User License. - Users that are disabled are not counted against the license. - The "Public" user does not count as one of the user licenses. - For ease of security administration, it is recommended that users are assigned to groups, then groups are used to assign user roles and permissions. ## **Creating an LDAP Profile** --- As users are administered within VisualVault, there is the ability to integrate VisualVault with LDAP authentication servers using LDAP Profiles. - After a profile has been set up administrators can import users into VisualVault. - Passwords for imported users are maintained by the LDAP source. - When integrating with LDAP authentication servers, the user accounts may not be easy to use in the VisualVault interface. - Administrators can change the format used to display user names in the interface. ### **LDAP Profile ID Card - Server Details Tab** --- **The following is a list of fields on the LDAP ID Card:** #### **LDAP Server Details** **![2iivPBT3htfc7EP2D-E-tmoO_8qKvbNAKg](https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/47055502234/original/2iivPBT3htfc7EP2D-E-tmoO_8qKvbNAKg.png?1611248311)** **Server Type** Configures the profile with various predetermined profile configurations. Options include: - Active Directory - ADAM (Active Directory Application Mode) - AD LDS (Active Directory Lightweight Directory Services) - Novell eDirectory - Other - Used for generic LDAP integration. **LDAP Profile Name** Name of LDAP Profile. **Description** Description of LDAP Profile. **Active Directory Domain** Can use a FQDN, domain name or IP Address. **Domain Naming Context** Full LDAP path. ( i.e. dc=acme,dc=com). **Use SSL** Configures the LDAP profile to connect to LDAP using SSL. - Required for AD-LDS & ADAM. #### **Server Credentials** **![DZe8z26KmBfPe_YyPcmN_pe3IPG3Sqjslw](https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/47055502328/original/DZe8z26KmBfPe_YyPcmN_pe3IPG3Sqjslw.png?1611248338)** **User Principal Name or Domain/User ID** The user ID is used to interface with LDAP. - Under most circumstances, an account that can read LDAP and facilitate authentication is required. **Password** Password for the user account used to connect to the LDAP server. #### **Search Options** **![UEaihZHwhchzsVXRDudyTPpiHqMClZNXnA](https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/47055502463/original/UEaihZHwhchzsVXRDudyTPpiHqMClZNXnA.png?1611248384)** **LDAP Search Filter** LDAP search filter to limit the kinds of records that will be available for import. **Search Results Page Size** Configure the number of results that can be returned from the LDAP server. #### **Attribute Mapping** **![JvDgjR85qIgWtQE-joqYcJS2101uAK0FGA](https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/47055502566/original/JvDgjR85qIgWtQE-joqYcJS2101uAK0FGA.png?1611248406)** **LDAP Attribute Names** Configures which LDAP attributes are mapped to the user attributes in VisualVault. #### **Security Options** **![1F56gTvcRHFi6mHznSLcE1Lerq6HbuWmAw](https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/47040632650/original/1F56gTvcRHFi6mHznSLcE1Lerq6HbuWmAw.png?1601674786)** **Import User's Groups** Configure the profile to import the groups from LDAP. **Create Groups Only in User's Default Database** If the user is in multiple VisualVault databases, the groups are only created in the default VisualVault database. **Allow Users to Change Password** Allows a user to change their LDAP password. **Allow Users to Reset Password** Allow the user to reset their password through the forgotten password process. #### **Scheduled Synchronization** **![ORFR4CkoJqV3c0nRIAuvoXqPsFsKoj9WRQ](https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/47055502698/original/ORFR4CkoJqV3c0nRIAuvoXqPsFsKoj9WRQ.png?1611248448)** **Enable Scheduled Synchronization** Enable synchronization to occur on a scheduled basis. **Import New Users** Configure the LDAP import to automatically import new users. **Occurs Every** Configure how often the scheduled synchronization occurs. **Start Date** Configure the start date for when the imports begin to occur. ### **LDAP Profile ID Card - Import Users Tab** --- **![e2BxiguserwUb_4CoGJt8h_C49LeA_4aCQ](https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/47055502808/original/e2BxiguserwUb_4CoGJt8h_C49LeA_4aCQ.png?1611248490)** This tab shows the list of users from the LDAP source that can be imported. - Select the Get LDAP Users button to get the list of users from LDAP. - Once you have a list of users, check the check box to the left of the user accounts you want to import. - Select Import Selected to import any user that has been checked. ### **LDAP Profile ID Card - Import Log Tab** --- **![gNV_SuW0QfnJLw8ThQHqkNzS5F2rn71Pnw](https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/47055503245/original/gNV_SuW0QfnJLw8ThQHqkNzS5F2rn71Pnw.png?1611248620)** The Import Log shows status information and logs as items are synchronized with VisualVault. ### **LDAP Profile Setup** --- **To create a new LDAP Profile:** 1. Hover over the user information in the upper right-hand corner of the window and select Control Panel. ![kaB3wx_chNwo9MP20giPjcm5bB1sr2teyw](https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/47055503302/original/kaB3wx_chNwo9MP20giPjcm5bB1sr2teyw.png?1611248634) 2. Select the Enterprise Tools tab. ![LrmykkakudwqV3uYslPJ2WJdTnOkz9OkGQ](https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/47055503648/original/LrmykkakudwqV3uYslPJ2WJdTnOkz9OkGQ.png?1611248745) 3. Select LDAP Import.   ![pxAq-tZIOyrj_QKYrWZzsLgf8RzXLX6_jg](https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/47055507468/original/pxAq-tZIOyrj_QKYrWZzsLgf8RzXLX6_jg.png?1611249936) 4. Use the New LDAP Profile button. ![s2pDkv45uCkoTwL5g2zlgk9XCBq-H75vxw](https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/47055511024/original/s2pDkv45uCkoTwL5g2zlgk9XCBq-H75vxw.png?1611251212) 5. **In the window that appears (for an image, see LDAP Profile ID Card sections above):** - Select the Server Type. - Key in the LDAP Profile Name. - Key in the LDAP or Active Directory Domain. - Key in the Domain Naming Context. i.e. dc=acme,dc=com. - Key in the User Principal Name or Domain/User ID. - Key in the Password of the user. - **Key in or configure other sections:** - Search Options - Attribute Mapping - Security Options - Scheduled Synchronization 6. When finished, use the Save button. ![vtgCoYR2XcRBHKg_Sw8FOipsO2kWYtRdLA](https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/47055511094/original/vtgCoYR2XcRBHKg_Sw8FOipsO2kWYtRdLA.png?1611251231) 7. Select Test Import at the top to ensure that the profile connects to LDAP. ![yQ8EZv5j8SSaEvN7FsJ3CKwmllrvqVfqFw](https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/47055511240/original/yQ8EZv5j8SSaEvN7FsJ3CKwmllrvqVfqFw.png?1611251242)