[/map {"- map/map "}) [/map/title {"- topic/title "}) Integrating with an LDAP System to Manage Users (title][/map/topicref {"- map/topicref "}) [/map/topicref/topicmeta {"- map/topicmeta "}) [/map/topicref/topicmeta/navtitle {"- topic/navtitle "}) Integrating with an LDAP System to Manage Users (navtitle][/map/topicref/topicmeta/linktext {"- map/linktext "}) Integrating with an LDAP System to Manage Users (linktext][/map/topicref/topicmeta/shortdesc {"- map/shortdesc "}) If you have an LDAP system, you can allow users to use those credentials to log in to Big Data Discovery. (shortdesc] (topicmeta][/map/topicref/topicref {"- map/topicref "}) [/map/topicref/topicref/topicmeta {"- map/topicmeta "}) [/map/topicref/topicref/topicmeta/navtitle {"- topic/navtitle "}) About using LDAP (navtitle][/map/topicref/topicref/topicmeta/linktext {"- map/linktext "}) About using LDAP (linktext][/map/topicref/topicref/topicmeta/shortdesc {"- map/shortdesc "}) LDAP (Lightweight Directory Access Protocol) allows you to have users connect to Big Data Discovery using their existing LDAP user accounts, rather than creating separate user accounts from within Big Data Discovery. LDAP is also used when integrating with a single sign-on (SSO) system. (shortdesc] (topicmeta] (topicref][/map/topicref/topicref {"- map/topicref "}) [/map/topicref/topicref/topicmeta {"- map/topicmeta "}) [/map/topicref/topicref/topicmeta/navtitle {"- topic/navtitle "}) Configuring the LDAP settings and server (navtitle][/map/topicref/topicref/topicmeta/linktext {"- map/linktext "}) Configuring the LDAP settings and server (linktext][/map/topicref/topicref/topicmeta/shortdesc {"- map/shortdesc "}) The LDAP settings on the Control Panel include whether LDAP is enabled and required for authentication, the connection to the LDAP server, and whether to support batch import or export to or from the LDAP directory. The method for processing batch imports is set in portal-ext.properties. (shortdesc] (topicmeta] (topicref][/map/topicref/topicref {"- map/topicref "}) [/map/topicref/topicref/topicmeta {"- map/topicmeta "}) [/map/topicref/topicref/topicmeta/navtitle {"- topic/navtitle "}) Preventing LDAP users from changing passwords in Big Data Discovery (navtitle][/map/topicref/topicref/topicmeta/linktext {"- map/linktext "}) Preventing LDAP users from changing passwords in Big Data Discovery (linktext][/map/topicref/topicref/topicmeta/shortdesc {"- map/shortdesc "}) When you are using LDAP, it is likely that you want user passwords to be managed outside of Big Data Discovery. (shortdesc] (topicmeta] (topicref][/map/topicref/topicref {"- map/topicref "}) [/map/topicref/topicref/topicmeta {"- map/topicmeta "}) [/map/topicref/topicref/topicmeta/navtitle {"- topic/navtitle "}) Preventing encrypted LDAP passwords from being stored in Big Data Discovery (navtitle][/map/topicref/topicref/topicmeta/linktext {"- map/linktext "}) Preventing encrypted LDAP passwords from being stored in Big Data Discovery (linktext][/map/topicref/topicref/topicmeta/shortdesc {"- map/shortdesc "}) By default, when you use LDAP for user authentication, each time a user logs in, Big Data Discovery stores a securely encrypted version of their LDAP password. For subsequent logins, Big Data Discovery can then authenticate the user even when it cannot connect to the LDAP system. For even stricter security, you can configure Big Data Discovery to prevent the passwords from being stored. (shortdesc] (topicmeta] (topicref][/map/topicref/topicref {"- map/topicref "}) [/map/topicref/topicref/topicmeta {"- map/topicmeta "}) [/map/topicref/topicref/topicmeta/navtitle {"- topic/navtitle "}) Assigning roles based on LDAP user groups (navtitle][/map/topicref/topicref/topicmeta/linktext {"- map/linktext "}) Assigning roles based on LDAP user groups (linktext][/map/topicref/topicref/topicmeta/shortdesc {"- map/shortdesc "}) For LDAP integration, it is recommended that you assign roles based on your LDAP groups. (shortdesc] (topicmeta] (topicref] (topicref] (map]