LDAP authentification for agents

arturs

As an agent, do I have the option to log in using AD, or is it only available for regular users?

KevinTheJedi

Available to both and it's configurable; meaning you can allow either-or or both.

Cheers.

arturs

Maybe you can show where i can configure it? 🙂 And do i need to give them specific permissions or roles in Active Directory?

KevinTheJedi

arturs

To configure global options: Admin Panel > Manage > Plugins > LDAP plugin > Instances > click instance > Config > scroll to bottom - There are two checkboxes; one for allowing LDAP for Users and one for allowing LDAP for Agents.

To configure each Agent: Admin Panel > Agents > Agents > click Agent > Authentication Backend > set to LDAP instance > Save Changes - This forces the Agent to only login via LDAP; keep at least one admin set to "Any Available" in case LDAP breaks for some reason.

arturs

KevinTheJedi
That means admin users still need to be registered manually, and only after that I can turn on LDAP authentication for them?

KevinTheJedi

arturs

Agents must always be manually created as you have to define Department access, Roles, Permissions, etc.

Users on the other hand will get auto-registered if they login via LDAP and they don't exist in the helpdesk or if they are a Guest. If they have an existing account it'll match based on username/email address.

Cheers.