Microsoft Active Directory Authentication Provider Specific Reference
Review the table to complete the values required in the Microsoft Authenticator.
Use this table to get the details about the fields in the Provider Settings page of Microsoft Active Directory.
| Section Name | Field Name | Description |
|---|---|---|
|
Connection |
Host |
The name of the Active Directory server addc.xyzcorp.com. |
|
Connection |
Port |
The port number on which the Active Directory server is listening (389). |
|
Connection |
Principal |
The LDAP DN for the user that connects to Active Directory when retrieving information about LDAP users. For example: cn=jsmith,cn=users,dc=us,dc=xyzcorp,dc=com. |
|
Connection |
Credential/Confirm Credential |
Password for the specified Principal. |
|
Groups |
Group Base DN |
The LDAP query used to find groups in AD. Only groups defined under this path will be visible to WebLogic. (CN=Builtin,DC=xyzcorp,DC=com). |
|
Users |
User Base DN |
The LDAP query used to find users in AD. CN=Users,DC=xyzcorp,DC=com |
|
Users |
User Name Attribute |
Attribute used to specify user name in AD. Default value is cn. Do not change this value unless you know your Active Directory is configured to use a different attribute for user name. |
|
Users |
All Users Filter |
LDAP search filter. Click More Info...for details. |
|
Users |
User From Name Filter |
LDAP search filter. Blank by default in AD. Click More Info... for details. |
|
Users |
User Object class |
The name of the user. |
|
Users |
Use Retrieved User Name as Principal |
Specifies whether or not the user name retrieved from the LDAP server should be used as the Principal in the Subject. Click More Info... for details. Oracle recommends that you select this check box as it helps to enforce consistent case usage. For example, if your LDAP user name is JSmith, but you logged in as jsmith (lower case) the Principal is still JSmith (mixed case). This means that any application role memberships granted directly to users, instead of indirectly through groups, are consistently applied at authentication time. |