1. Cloud Native Core Console User's Guide
  2. Setting up CNC Console IAM
  3. Integrating CNC Console LDAP Server with CNC Console IAM
  4. Setting up User Federation with CNC Console IAM (LDAP Server integration)

Setting up User Federation with CNC Console IAM (LDAP Server integration)

  1. Go to CNCC IAM console http://<cncc-iam-ingress-ip>:<cncc-iam-ingress-port> and login using admin credentials provided during installation of CNCC IAM.

    img/cnc_iam.png

  2. Select Realm Settings and click Add realm under Cncc. Click the User Federation in the left pane. The User Federation screen appears in the right pane.

    img/f03.png

  3. From the dropdown list in the User federation screen select ldap, the Add user federation provider screen appears.

    img/f04.png

  4. Fill the following parameters:
    • Console Display Name: Enter the display name.
    • Vendor: Enter the LDAP server provider name for the company.

    Note:

    This must usually fill the defaults for many of the fields. But in case you have a different setup than the defaults, enter the correct values to be provided. Current set up is Spring embedded LDAP, so select the last option "Other" from the drop-down list. This fills in many of the required fields.

    img/f05.png

    • Most companies have the UUID LDAP attribute value set as "entryUUID". If you don't have this field, than just use another unique identifier.
    • Provide company LDAP server details.
    • If LDAP is secured then provide the admin bind username and password else select Bind-type as "none".
    • Click "Test Connection" and "Test Authentication".
    • Set Cache policy as "NO_CACHE".
  5. After filling the required fields, the screen appears as below. Click Save.

    img/f06.png

  6. New buttons (Synchronize changed users, Synchronize all users, Remove imported, Unlink users) appears next to the Save and Cancel.

    img/f07.png

  7. If a user has to be import to CNCC-IAM, Click Synchronize all users. If the synchronization is successful, the success message appears. If the synchronization fails, then check the trouble shooting section and look at cncc-iam logs in debug mode.

    img/f08.png

  8. The user can view the imported users by clicking Users under Manage in the left pane and click View all users in the right pane. The list of users and details appears.

    img/f09.png

Note:

The steps 8 and 9 are optional.