Connecting to a directory - PingFederate - 10.2

PingFederate Server

bundle
pingfederate-102
ft:publication_title
PingFederate Server
Product_Version_ce
PingFederate 10.2
category
Product
pf-102
pingfederate
ContentType_ce

On the Connection tab, connect PingFederate to a directory server.

From the Directory Type list, select a directory type and provide the required information. Click Next.
For information about each field, see the following table.
Field Description
Directory Type Select the directory server type from the list.

For a list of supported directory servers, see System requirements.

Data Store Name Enter the data store name.
Hostname Enter directory server location.

It can be the IP address, the host name, or the fully-qualified domain name of the directory server. The entry can include a port number.

Service Account DN Enter the distinguished name (DN) of the service account that PingFederate can use to communicate with the directory server.
Password Enter the service account password.
Search Base Enter the DN of the location in the directory where PingFederate begins its data store queries.
Search Filter Enter the LDAP query to locate a user record for attribute lookup and potentially credential validation.

Depending on the selected directory type, the default value is either sAMAccountName=${username} or uid=${username}.

If you require a more advanced search filter, ensure the value is a valid LDAP filter. For more information, consult your directory administrators.

When you click Next, PingFederate tries to establish a secure LDAPS connection to the directory server.

If the directory server does not support LDAPS, the Unsecure Connection window appears. To continue without a secure connection, click Next. Alternatively, you can go back to the Connection tab and enter a different directory server.

If PingFederate does not trust the certificate from the directory server, the Certificate Error window appears. Import the directory server certificate and then click Next. Alternatively, you can go back to the Connection tab and enter a different directory server.