Integrating with an LDAP System to Manage Users

If you have an LDAP system, users can use their LDAP credentials to log in to Big Data Discovery. You can also configure BDD to communicate with the LDAP server over TLS/SSL.

About using LDAP
Integrating Studio with Lightweight Directory Access Protocol (LDAP) allows users to sign in to Studio using their existing LDAP user accounts, rather than creating separate user accounts from within Studio. LDAP is also used when integrating with a single sign-on (SSO) system.
Configuring the LDAP settings and server
The LDAP settings on the Control Panel Credentials page include whether LDAP is enabled and required for authentication, the connection to the LDAP server, and whether to support batch import or export to or from the LDAP directory. The method for processing batch imports is set in portal-ext.properties.
Authenticating against LDAP over TLS/SSL
To have Big Data Discovery Studio authenticate users against LDAP over TLS/SSL, export a certificate from your LDAP server and copy it to the cacerts keystore on the machine running Studio.
Preventing encrypted LDAP passwords from being stored in BDD
By default, when you use LDAP for user authentication, each time a user logs in, Big Data Discovery stores a securely encrypted version of their LDAP password. For subsequent logins, Big Data Discovery can then authenticate the user even when it cannot connect to the LDAP system. For even stricter security, you can configure Big Data Discovery to prevent the passwords from being stored.
Assigning roles based on LDAP user groups
For LDAP integration, it is recommended that you assign roles based on your LDAP groups.