IAM Federation
IAM Federation allows you to centralize user management on the CMP (Cloud Management Platform) by integrating it with an external LDAP directory. Through this integration, you can securely synchronize and manage your existing LDAP users within the CMP platform.
To complete the LDAP configuration, follow the three-stage wizard outlined below.
Step 1: Connection Details
In the first step, a secure communication bridge is established between your external LDAP server and the CMP. You must populate the following parameters accurately according to their expected formats:
| Parameter | Description |
|---|---|
| LDAP Server URL | The IP or domain address used to access your LDAP server (e.g., ldap:// or ldaps:// for secure connections). |
| Domain | The domain name of the directory to connect to. |
| Service Account Path | The Distinguished Name (DN) of the service account authorized to perform user queries on the server. |
| Password | The password for the specified service account. |
| Search Paths | The directory paths (Base DN) where user searches will be executed. |
After entering the details, you must click the "Test Connection" button on the same screen. The system will block progression to the next stage until a "Connection Successful" message is received.
Step 2: Map Attributes
Once the connection is successfully verified, you need to map LDAP attributes to CMP fields to ensure user data is synchronized accurately. For successful operations and platform consistency, the following mandatory fields must be mapped to their corresponding attribute values inside your LDAP:
- First Name
- Last Name
- Username
Beyond the mandatory fields, you can optionally select and map any other user-specific information you wish to retain on the platform.
Step 3: Configuration Summary
In the final stage, the system fetches and lists sample user data from your LDAP server based on the provided configurations for verification purposes.
- Review the displayed user list to ensure the accuracy of the configuration.
- If the correct users are displayed as expected, finalize the setup by clicking the "Save" button.
Managing Configurations
After saving, your active LDAP configurations will be displayed on the main IAM Settings dashboard. From this view, you can monitor existing setups and use the control/action options located on the right side of the configuration row to edit, manage, or delete your settings.
Configuration Management and Synchronization
Once you save your settings and are redirected to the configuration screen, you will have access to a control panel where you can manage your setup and trigger synchronization processes.
In the top right corner of the screen, you can use the toggle to Enable or Disable the LDAP integration. Once the integration is "Enabled", you can manage your federation using the following action buttons:
Sync Now
Clicking this button initiates the import process. Users located within the provided search paths will be fetched and added to the CMP as IAM users.
When you perform the synchronization, any existing IAM users that were previously added manually via the CMP interface (without LDAP) will be terminated.
Reset Sync
This button allows you to terminate all users that were specifically created via the LDAP synchronization process.
Reset LDAP Settings
This action completely clears and resets all your current LDAP configurations from the system.
Edit LDAP Settings
This option allows you to return to the configuration wizard to update your existing LDAP connection details or attribute mappings.