Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

This functionality requires the phixflow-domains.xml file to be configured.  To keep the current functionality use the already configured phixflow-domains.xml.example

PhixFlow Active Directory Setup

System Configuration

There is a new Active Directory tab in the System Configuration window.

...

With the given configuration, assuming the instance name is ‘CV1’, members of the following Active Directory groups will be authorized to log in into this PhixFlow instance:

  • CV_ADMINS
  • CV_USERS_CV1

User Groups

The current PhixFlow mechanism of User Groups can be applied to Active Directory users. There is a new Active Directory Group field in the User Group editor window. Members of the given Active Directory group will be members of the configured PhixFlow User Group. Use {instance} to include the PhixFlow instance name.

...

Active Directory users appear on the Group Members list. There is a new column which indicates if the user is a local user or a Active Directory user. Only local users can be added or removed from the list.

User Details

While editing an Active Directory user some fields are invisible. Login name cannot be changed. The domain of the User is shown in the header of the editor.

Logging in as a Active Directory user

There is a new Domain field on a login screen.

...

If the Active Directory user is not a member of a group authorized to use the PhixFlow, the proper message is shown.

Use the encrypted connection

To use the encrypted connection, the protocol of the connection must me set to ldaps://instead of ldap://. It can be set in the phixflow-domains.xml file, in the value of the url field of selected bean.

...