Configure authentication settings
You can configure OnCommand Workflow Automation (WFA) to use a Microsoft Active Directory (AD) Lightweight Directory Access Protocol (LDAP) server for authentication and authorization.
You must have configured a Microsoft AD LDAP server in your environment.
Only Microsoft AD LDAP authentication is supported for WFA. You cannot use any other LDAP authentication methods, including Microsoft AD Lightweight Directory Services (AD LDS) or Microsoft Global Catalog.
|During communication, LDAP sends the user name and password in plain text. However, LDAPS (LDAP secure) communication is encrypted and secure.|
Log in to WFA through a web browser as an admin.
Click Settings, and under Setup click Authentication.
Select the Enable Active Directory check box.
Enter the required information in the fields:
Optional: If you want to use the user@domain format for domain users, replace
userPrincipalNamein the User name attribute field.
Optional: If unique values are required for your environment, edit the required fields.
Enter the AD server URI as follows:
If you have enabled LDAP over SSL, you can use the following URI format:
Add a list of AD group names the required roles.
You can add a list of AD group names to the required roles in the Active Directory Groups Window.