You will need Site Administrator role to configure LDAP connections.
Add LDAP Connections
To create a new LDAP connection:
- Access to Site Administration. Click on Authentication Integration tab
- Click on Add icon on the toolbar
- In the right hand side input form, you can change the default connection name
- You will need to input the required fields as described in this section
- Click on Save button
Note: You can create and activate multiple connections to various LDAP servers.
Edit LDAP Connections
To edit an LDAP connection:
- Select an existing LDAP connection from the left hand side panel
- In the right hand side input form, you can change its name and configurations as described in this section
- Click on Save button
Configuring LDAP Connections
To configure an LDAP connection, you will need to input the following information:
- URL: input an URL in this format: hostname:port
- Hostname: The host name or IP of your directory server
- Port: The port on which your directory server is listening
Important: Do not enter the protocol.
- Base DN: The root distinguished name (DN) to use when running queries against the directory server. Examples:
Hint: For Microsoft Active Directory, specify the base DN in the following format: dc=domain1,dc=local. You will need to replace the domain1 and local for your specific configuration. Microsoft Server provides a tool called ldp.exe which is useful for finding out and configuring the the LDAP structure of your server.
- Search Base: This value is used in addition to the base DN when searching and loading users. If no value is supplied, the subtree search will start from the base DN. Example:
- Search Filter: The filter to use when searching user objects. Example:
Hint: More examples can be found here.
- User DN:The distinguished name of the user that the application will use when connecting to the directory server. Examples:
Note: Ensure that this is an administrator user for the LDAP engine. For example, in Active Directory the user will need to be a member of the built-in Administrators group.
- Password: The password of the user specified above
- Mapping fields: you will need to map qTest user properties (Username, First name, Last name, and Email) with corresponding LDAP attributes
- If your LDAP server is using SSL connection, check on Use SSL connection
- If you are using Active Directory, check on Is Active Directory
- Click on Test connection button to verify if qTest is able to connect to your LDAP server
- Activate the connection by switching Activation status on
Note: If qTest fails to connect to your LDAP server, you will not be able to activate the connection