LDAP Identity Provider Configuration
As mentioned in
Getting Started with Safous article, you can integrate with 3rd party identity service that leverage AD or LDAP authentication approach. Before you could do that, please check these KB down below to ensure you have the Admin access and can accessed it:
- login to https://portal.safous.com
- Go to Settings tab> ZTNA
- In Configurations, choose Identity Provider
- It will open the list of identity providers that have been integrated, by default it only has local
- Click on New IDP, which it will expand the form of IDP
- Input the name and ensure the status is enable (green)
- Ensure you are choosing the LDAP for the identity provider setting
- You need to input LDAP setting based on the external IDP that you want to integrate. For details about some know IDP integration can be found in here
- You could changed the default behavior for the MFA Mode setting
- If you choose MFA Mode to as "Mandatory", then you cloud select MFA Method whether use "Scan QR", "Provide Phone Number" or both
- On Setting Enroll you could request user the information for Personal Desktop by enable the option
- You can choose the enrollment behavior for the Identity Provider that you tried to integrate
- Admin rollout --- Means that every user need to be added by admin in users
- Self service enrollment --- Means user or external IDP can directly enrolled by themselves but not yet activated. Enable Activate users automatically when they complete enrollment so the user can automatically activated.
- Once you done with the configuration, click "Save"
- If everything correctly configured, you can login to the user portal https://users.<xxxx>.ztna.safous.com and check "With Credential", which you will see your LDAP configuration on drop down
