OrangeHRM supports LDAP (Lightweight Directory Access Protocol) authentication, allowing users to log in using their LDAP credentials. This integration streamlines user management and enhances security by leveraging existing LDAP directories. Follow these step-by-step instructions to set up LDAP authentication in OrangeHRM:
Prerequisites:
Before you begin, ensure that you have the following information:
- LDAP Server Address
- LDAP Port (typically 389 for unencrypted connections or 636 for encrypted connections)
- Base DN (Distinguished Name) for searching users
- LDAP User Suffix (Your domain name if you are using MS Active Directory)
- LDAP Bind DN (Distinguished Name) and password for binding to the LDAP server
- LDAP Filter for user search (optional but recommended for narrowing down searches)
- LDAP Attribute for the username (usually 'uid' or 'sAMAccountName' depending on your LDAP server)
Steps to Configure LDAP Authentication:
Step 1: Log in to OrangeHRM
- Log in to your OrangeHRM admin panel using your system admin credentials.
Step 2: Navigate to LDAP Settings
- Go to the "HR Administration" module.
- Under the "Configuration" section, select "Authentication"
Step 3: Configure LDAP Settings
- In the "General Settings" tab, find the "LDAP Settings" section.
- Check the "Enable LDAP Authentication" box.
- Enter the LDAP Server Address and Port.
- Fill in the Base DN, LDAP Bind DN, and LDAP Bind Password.
- Set the LDAP Filter and LDAP Attribute for user search.
- Click "Save" to apply the changes.
Step 5: Update User Authentication Settings
- Navigate to "HR Administration" > "Users"
- Create a user name for an employee
- Save the changes without giving a password
Step 6: Test LDAP Configuration
- Log out from the system.
- Enter a LDAP username and password from your LDAP directory.
- Check whether it is possible to login to the system