Anchor | ||||
---|---|---|---|---|
|
Table of Contents | ||
---|---|---|
|
Overview
Yellowfin can be connected to an LDAP source for user authentication and group management purposes. This allows Yellowfin access to be controlled externally and organisation-wide simply and quickly. Users can use their existing intranet password for Yellowfin authentication, and reports can be given access restrictions which include or exclude users in specific LDAP groups.
...
For Yellowfin to provision users automatically it has to assign a role to them. This role is defined as a Yellowfin 'Default' Role. In the Roles ロール page, define one Role as the Default.
- Navigate to Administration > General > Role Management
- Select the Role you wish to make Default
- Tick the Default Role box and Save
Note: if no role is set as default the users will not be provisioned correctly into Yellowfin and the process will fail.
...
To provision users from the LDAP directory and to use LDAP Authentication the required attributes must be defined on the Configuration システム設定 page. The attributes required by Yellowfin include:
...
Once defined, Yellowfin will automatically provision users as they attempt to login to Yellowfin for the first time.
Note: if the users in LDAP exceed the number of licences purchased, any new users will not be provisioned into the system.
...
This is an example taken from the Configuration システム設定 page of Yellowfin
The configuration above will:
- Connect to LDAP host
192.168.4.241
on port389
- Users will be searched from
cn=Users,dc=i4,dc=local
- Users will be allowed access to Yellowfin if they are a member of
cn=Yellowfin Users,cn=Users,dc=i4,dc=local
- The user search is conducted with user
cn=Administrator,cn=Users,dc=i4,dc=local
bound to the LDAP server with passwordpassword
- Users will use
employeeID
as their login ID and Yellowfin will load their given name, surname, and email from the LDAP directory attributesgivenName
,LastName
, anduserPrincipalName
respectively
Note: if a user is not found in the LDAP directory, it will look for the username as a standard Yellowfin user.
...
- Open the Add LDAP Group drop down
- A list of LDAP groups will be displayed. Select the group to be used to create members for the Yellowfin Group
- Click Add to add the LDAP Group members into the Yellowfin Group