To allow users in your organization to log in to the FM Portal using their domain password, you can set up an LDAP interface during the portal configuration.
Prerequisites
You have administrator rights in the FM Portal
Your organization uses Microsoft Active Directory
For each individual user, the username must be identical to the domain login name
Procedure in the FM Portal
Path to the starting point: Control Panel - Portal Options - Interfaces - Interface Configuration - LDAP - LDAP Systems
Click New... in the list's toolbar. An empty form opens.
In the Identification section, fill in the Code, Name, Order, and Type fields.
Form for LDAP user import configuration with fields for code, designation, sequence, and type set to AD-User Import
Now fill in all fields in the Access Data section. Enter your domain controller in the Server field.
In the Port field, enter the value "636" (TLS-secured connection).
Check the Secure Connection box.
In the "Access Data" section, enter an LDAP test account and assign a password. Use a user that exists in Active Directory.
In the LDAP Import Configuration section, enter the user’s DN (distinguished name) and the user filter.
Example: For an Active Directory, enter the following in the User DN field: OU=CompanyName, DC=ServerName, DC=CompanyAbbreviation, DC=de (OU: Organizational Unit, DC: Domain Component)
In the User Group Filter section, enter the group DN (distinguished name) and the user group filter.
Click Save in the toolbar.
Set up the identifier in the LDAP Import Configuration section.
Note: We recommend the SAM account (Windows login name).
Click Save in the toolbar.
Tip: Test the configured LDAP interface via Control Panel - Portal Options - Interfaces - Interface Configuration - LDAP - LDAP Connection Test
Note: Without using the eTASK.PersonnelDataImport interface, the username for each FM Portal user must be identical to the domain login name in the Personnel List entry.Login form for FM-Portal with username field, checkboxes for account status and password options, and radio buttons to keep or change password
Go to Control Panel - Portal Options - Portal Administration - System Configuration.
Configuration table showing LOGIN settings: ACTIVEDIRECTORYDOMAIN empty, LOGINUSACTIVEDIRECTORY set to 1, and other parameters
Tip: Use the search box at the top and enter "active" as the search term. Click the magnifying glass icon to search.
Click on the entry ACTIVEDIRECTORYDOMAIN.
In the Identification section, enter your domain name under Configuration Value.
Click Save in the toolbar.
Click on the LOGINUSEACTIVEDIRECTORY entry.
In the Identification section, under Configuration Value, enter 1.
