Configuration and support of on-prem LDAP

[tvprasad]

Hello,
I'm curious about the compatibility of this application with an on-premises LDAP (Lightweight Directory Access Protocol, commonly used by on-premises Active Directory). Could you guide me on how to integrate it? Thanks in advance.
cc: @fretje

[kallievz]

Need aswell for some clients. With multiple options on same environment, Some tenants have Azure AD, some LDAP, and some tenants use normal username/password. Need to be intelligent enough to differentiate between these. Also, login, some users go offsite, and is contracted to the tenants, and might not have email account, would need to log in with either a telephone number/username.

[punkouter24]

this is for old school active directory right? This is what my boss is asking about but i try to convince them to just made SQL logins case I have no idea how to handle AD

[kallievz]

Yes, LDAP is old-school, but still a lot of corporates use it, in our case, some of our clients intranet is heavily policed, exposing only certain URL's they can access via LDAP AD. We have 4 that would need LDAP access. But needs to be hybrid, in following sequence, LDAP/Azure AD / jwt, so, first need to check AD access, then Azure AD, configurable by tenant own, and then JWT. almost like fallback.

[punkouter24]

how does that work ? Would the roles come from windows? and all we need to do is point it to ldap or whatever ? and get the user proerties and roles and the rest is the same ?

[kallievz]

Sometime you would use the groups assigned in LDAP, or map it to your roles if different, permission is then given for the role. In our case, the client's admin will assign them to a UserGroup, we pinged the UserGroup for all users whenever a client hit the login page, insert new users, and deactivate users not in list. then user will be logged in immediately. The group matched the role, so essentially we used role access only.