Microsoft Active Directory Authentication Provider Specific Reference

Review the table to complete the values required in the Microsoft Authenticator.

Use this table to get the details about the fields in the Provider Settings page of Microsoft Active Directory.

Section Name Field Name Description

Connection

Host

The name of the Active Directory server addc.xyzcorp.com.

Connection

Port

The port number on which the Active Directory server is listening (389).

Connection

Principal

The LDAP DN for the user that connects to Active Directory when retrieving information about LDAP users. For example: cn=jsmith,cn=users,dc=us,dc=xyzcorp,dc=com.

Connection

Credential/Confirm Credential

Password for the specified Principal.

Groups

Group Base DN

The LDAP query used to find groups in AD.

Only groups defined under this path will be visible to WebLogic.

(CN=Builtin,DC=xyzcorp,DC=com).

Users

User Base DN

The LDAP query used to find users in AD. CN=Users,DC=xyzcorp,DC=com

Users

User Name Attribute

Attribute used to specify user name in AD. Default value is cn.

Do not change this value unless you know your Active Directory is configured to use a different attribute for user name.

Users

All Users Filter

LDAP search filter. Click More Info...for details.

Users

User From Name Filter

LDAP search filter. Blank by default in AD. Click More Info... for details.

Users

User Object class

The name of the user.

Users

Use Retrieved User Name as Principal

Specifies whether or not the user name retrieved from the LDAP server should be used as the Principal in the Subject. Click More Info... for details.

Oracle recommends that you select this check box as it helps to enforce consistent case usage. For example, if your LDAP user name is JSmith, but you logged in as jsmith (lower case) the Principal is still JSmith (mixed case). This means that any application role memberships granted directly to users, instead of indirectly through groups, are consistently applied at authentication time.