LDAP Workflow

bahusafoo

I'm looking at using OSTicket for an internal ticketing system. I can't find any videos (other than one in spanish) covering what OSTicket with LDAP integration looks like.

What I'm looking for is a system that automatically allows users within an Active Directory domain to login and create tickets, map agent teams based on AD groups, etc. I do not want to have to manually create each user account prior to that user being able to use OSTicket, if they have an AD account, they should be able to use it to log in (or better yet, auto-sign in with pass-through authentication to that AD account). Is this possible with OSticket stock plugins? Does anyone have examples of this we can look at?

KevinTheJedi

bahusafoo

For Users, if they don't exist in osTicket and they login via LDAP the system will auto-register an account for them. You can pull basic info like name, email, and phone but not much else unless you customize the plugin and core code. As for Agents you will always have to manually create them first as you have to define their access, roles, etc.

We don't have any resources, videos, or guides on LDAP but it's pretty straightforward and trivial for any AD admin.

Cheers.

bahusafoo

KevinTheJedi Sure, but having a successful connection with no resources videos or guides makes it hard for even an experienced AD admin who is not familiar with OSTicket or its workflows. For example, Agents could be defined access via some AD group mappings, etc. - this is typical of LDAP integrations for many other web-based softwares (drupal, wordpress, even other open-source ticketing systems). Having even a basic document of "here is what is currently possible, and here is how to accomplish it" would be a huge improvement.

I did see there was API, so thought I could work around the agent mapping to access/roles/even departments/organizations to AD groups via building some other automation utilizing that, but docs say the API only supports creating tickets for now.

KevinTheJedi

bahusafoo

You are correct, the API is only for Ticket creation at this time. With that being said v2.0 will have a fully RESTful API that will enable better integration possibilities so please stay tuned!

You are also correct in that a guide would be helpful (I agree) and it’s been on our todo list however we simply haven’t got around to it yet. I will say the LDAP plugin has always been more of just a simple authentication plugin; nothing more, nothing less. But like I said, v2.0 will open the door to much more possibilities.

Cheers.