corporate staff login only

jeffwong

Hopefully one of the feature as below can be implement for corporate internal use:Specify email domain registrationLet's say I just want to allow @[deleted] and @[deleted] to be able register and refused the rest.Registration MethodAdd one more method "Private - LDAP Login & Agent registration"Currently, LDAP login must work with "Public - Anyone can register", but we just want LDAP user to be able login and don't allow public registration.All LDAP user as agentIf possible, please allow LDAP user login as agent with a default role instead of manually assign the user become an agent.Thank you.

Chefkeks

1. You could simply create a ticket filter to reject all tickets not coming from users/emails that end with @[deleted] or @[deleted] (Admin Panel > Manage > Ticket Filters)2. You will need to edit the source code to achieve this.Another possibility is to import/create all LDAP users, so they can login, and let registration method then at "private".A third possibility is to use the LDAP auth plugin + HTTP auth plugin. The authentication will then be done by the webserver, so you can implement some rules there to reject specific users / allow only users you want. Take a look at the following discussions therefore:http://forum.osticket.com/d/discussion//http-passthru#latesthttp://forum.osticket.com/d/discussion//sso-implementation#latest3. I'm not aware of a function to do so currently. You'll also need to import/create all LDAP users which shall become an agent or edit the source code.

jeffwong

Thank you for the reply.Maybe a feature "Allowed Domain" can be added, the system will reject email registration if it is not in the allowed list.I hope that no self modifying the source code in case forget to change it back when upgrade the system or server migration.