This page contains information to assist our customers with utilizing the Active Directory (AD) / Lightweight Directory Access Protocol (LDAP) feature in RegScale. It describes what it is, why you would use it, the benefits, and provides instructions on getting started.
AD/LDAP is a common directory based service provided by Microsoft and others to securely authenticate users. It is commonly used to authenticate users to devices, networks, and applications to provide centralized security around authentication services.
AD/LDAP is used to outsource authentication from RegScale to customer provided authentication directories. There are many reasons to use this feature which include:
- Centralized authentication
- Tying access to AD/LDAP groups to manage need to know
- Maintains existing security logging and account management
This feature has multiple benefits for an organization; to include:
- Improved security by centrally managing and monitoring authentication
- Easier to add/remove access when onboarding and offboarding employees
- Improved continuous monitoring of access
Instructions for using this feature are provided below:
- Configure the AD/LDAP following our configuration guide
- Test the connectivity and then sync the AD/LDAP users into RegScale
- Once AD/LDAP is enabled, you will see a new AD/LDAP tab on the login page
- Click this tab then enter your AD/LDAP username and password to authenticate via the customer provided AD/LDAP system
- If you enter valid credentials, you will authenticate successfully and login
- For each user sync'd via AD/LDAP, you must ensure you assign the appropriate roles/permissions in the system to grant access. See our guide for user management and roles
NOTE 1: This feature is not available in RegScale Community Edition (CE).
NOTE 2: Single Sign On (SSO) with Azure AD is coming soon.
NOTE 3: You must have administrator access to configure AD/LDAP.
Updated 7 months ago