Configuring authentication settings

You can configure OnCommand Workflow Automation (WFA) to use a Microsoft Active Directory (AD) Lightweight Directory Access Protocol (LDAP) server for authentication and authorization.

1. Log in to WFA through a web browser as an admin.
2. Add a list of Active Directory group names to the required roles.
   Note: You can add a list of AD group names to the required roles in the Active Directory Groups Window.

   Active Directory Groups window

3. Click Administration > WFA Configuration.
4. In the WFA Configuration dialog box, click the Authentication tab, and then select the Enable Active Directory check box.
5. Enter the required information in the fields:
   1. Optional: If you want to use the user@domain format for domain users, replace sAMAccountName with userPrincipalName in the User name attribute field.
   2. Optional: If unique values are required for your environment, edit the required fields.
6. Click Add to add the Active Directory in the Active Directory Servers table with a URI format: ldap://active_directory_server_address[:port]
   ldap://NB-T01.example.com[:389]

   If you have enabled LDAP over SSL, you can use the following URI format: ldaps://active_directory_server_address[:port]

7. Optional: Provide the credentials to bind the LDAP server and the base DN.
8. Optional: Test the authentication of the given user:
   1. Enter the user name and password.
   2. Click Test Authentication.
   Note: You must have added the Active Directory Group to test the authentication of the given user in WFA.
9. Click Save.