-
Notifications
You must be signed in to change notification settings - Fork 34
Two phase LDAP authentication
Mark Southee edited this page Apr 16, 2021
·
1 revision
In some cases only privileged users are allowed perform LDAP search. In this case you can specify your admin user using LDAPAdminUser
and LDAPAdminPassword
options. TIB will perform the initial bind as an admin user, then will perform a LDAP lookup based on a specified DN template or LDAPFilter, and will perform the bind one more time, with the user DN.
{
"ActionType": "GenerateOrLoginUserProfile",
"ID": "4",
"OrgID": "59fc80d9158519599ca23cfc",
"ProviderConfig": {
"FailureRedirect": "https://tyk-dashboard:3000/?fail=true",
"LDAPPort": "389",
"LDAPAdminUser": "admin",
"LDAPAdminPassword": "password",
"LDAPServer": "localhost",
"LDAPUserDN": "uid=*USERNAME*,dc=example,dc=org"
},
"ProviderName": "ADProvider",
"ReturnURL": "https://tyk-dashboard:3000/tap",
"Type": "passthrough"
}