Directory Access Settings

LearningSpace Enterprise can connect to directory servers that use the Lightweight Directory Access Protocol (LDAP) to provide an efficient way to authenticate users and synchronize groups.

Go to Directory Access Settings in the System, and configure the directory server(s) of your institution (more than one can be added).

Manage further settings such as user authentication methods and synchronization.

Contact your organization’s network administrator or IT professional for the exact details of your directory server.

LDAP authentication modes

1. Use full DN (selected by default): 
   This method requests a user's full distinguished name to authenticate them.
   Specify the Authentication ID, DN prefixes, and postfixes to find users on your directory server. 
   Any user who matches the request can log in to LearningSpace with credentials stored on the directory server.
   
   

2. Resolve samAccountName:
   This method requires a query user and the user’s samAccountName to authenticate them.

   1. Provide the name and password of your directory server's query user.

   2. Provide a query base to define the level of the query in your directory tree.

Any user who matches the query can log in to LearningSpace with credentials stored on the directory server.
Applying a query user grants LearningSpace Enterprise permission to search the provided query base and authenticate any user with a match for their samAccountName.

LDAP synchronization

Switch on LDAP synchronization to easily import users from your directory server(s) into a user group in LearningSpace.

• Provide the name and password of the query user (dedicated for synchronization) of your directory server.

• At Mapping, enter the attributes used on your directory server that correspond with each personal detail field (e.g., first name, email, UCID, etc.).
  LearningSpace needs these details in Mapping to match each data field with an attribute and execute a successful synchronization.