You can allow users to log in to ALM using their LDAP passwords or external authentication, instead of ALM passwords.
Working with LDAP through SSL requires that you perform additional steps. For details, see this KB article.
Considerations
- After LDAP authentication is enabled, authentication will be performed against the LDAP server. Make sure that the site administrator is set up as an LDAP user before switching to LDAP authentication, otherwise the site administrator will not be able to log in after the authentication type is switched.
-
After you enable LDAP authentication, you need to disable the password reset option, by defining the PASSWORD_RESET_DISABLE Site Configuration parameter. For details, see Setting ALM Configuration Parameters.
Enabling LDAP Authentication for Users
-
In Site Administration, click the Site Users tab.
-
Click the User Settings button
and choose Authentication Settings. The Authentication Settings dialog box opens.
-
Under Authentication type, select LDAP to set the authentication type as LDAP for all users.
-
Click OK.
Enabling External Authentication for Users
-
In Site Administration, click the Site Users tab.
-
Click the User Settings button
and choose Authentication Settings. The Authentication Settings dialog box opens.
-
Under Authentication type, select External Authentication to set external authentication for all users.
-
Click Advanced Settings to set the external authentication parameters. The External Authentication Advanced Settings dialog box opens.
-
From the dropdown list, select the Authentication Type.
- Email: ALM extracts the user email from the header value and finds the ALM user with the same email address defined in ALM.
- Name: ALM extracts the user name from the header value and finds the ALM user with the same name in the Description field.
- Email + Name: ALM Desktop Client extracts the user email and name from the header value. ALM first tries to match the email to an ALM user, and if this is unsuccessful tries to match the name to an ALM user.
-
Enter the Pattern - The format for extracting information from the header.
If the Pattern is not defined, ALM uses the default pattern.
Following are the default patterns that ALM uses to search for the email and common name:
-
To match by email field: *[eE][^=]*=([^,]*@[^,]*).*
-
To match by description field: *?[cC][nN] *= *([^/,]*).*
You can also write your own pattern.
-
- Click OK.
- Click OK in the Authentication Settings dialog box.
