How to Configure Active Directory (AD) Integration for Kentico?

Overview

The Kentico AD Integration plugin connects your Kentico application with Microsoft Active Directory for centralized LDAP authentication. Users can sign in to Kentico using their existing Active Directory credentials, so identity stays in one place and password fatigue is reduced. This guide covers plugin installation, LDAP connection setup, sign-in settings, and profile mapping so you can enable secure Active Directory login for Kentico users.

Download

Pre-requisites : Download And Installation

Download the Kentico AD Integration plugin.
Add the following module in your web.config file under the <modules> section.

  
     <add name="miniOrangePluginModule"

        type="miniOrange.Kentico.ADIntegration.HttpModules.miniOrangePluginModule, miniOrange.Kentico.ADIntegration"

        preCondition="managedHandler" />

After adding the module, open your browser and browse the plugin dashboard with the URL below:


    
     https://<kentico-base-url>/CMSPages/logon.aspx?adaction=config

Select the required connection string from the dropdown and click on the Save and Test Connection buttons to configure the database connection for the miniOrange Kentico AD Integration plugin.

After saving and testing the connection, click the Continue button to proceed.

Kentico AD - Save and test connection, then Continue

Configuration Steps

Step-by-step guide for implementing Active Directory (AD) Integration in Kentico.

1. Access the Kentico AD Integration Plugin Dashboard

After successful database configuration, the registration page or login page will appear as shown below.

Register with your account by clicking the Register button to configure the Kentico AD Integration plugin.
After successful registration, you will receive a trial license key on your registered email address.
To activate the plugin, you can either:
- Enter the license key received via email in the provided input field.
OR
- Go to the Upload License File tab and upload the license file that you downloaded using the Download License Key button by using the Choose File option.

Then, click the Activate License button.

After successful license activation, the plugin dashboard will open as shown below.

2. Configure AD Connection

On the plugin dashboard, go to the AD Connection tab and fill in the Connection Settings to connect Kentico with Active Directory.
Select Microsoft Active Directory (On-Prem) from the Select Directory Server dropdown.
Choose the required Protocol from the dropdown. Select LDAP or LDAPS based on your Active Directory setup.

Kentico AD - Select LDAP or LDAPS protocol

Enter your Server IP / Domain, Port (default is 389 for LDAP), Username (for example, administrator@domain.com or CN=admin,DC=domain,DC=com), and Password.
Click the Save and Test Connection button to test your AD connection with your Kentico site. You will receive a success or failure notification to confirm the same.

Once the AD / LDAP connection test succeeds, the Configure Base DNs section is loaded. Select the required User Base DN from the dropdown. This is the Base DN from which user accounts are searched in Active Directory.

Kentico AD - Select User Base DN from dropdown

Click the Save Base DN button to save the selected User Base DN.

Navigate to the Sign In Settings tab from the left sidebar to enable Active Directory authentication for Kentico users.
Turn on the Allow AD Login toggle. When this option is disabled, users cannot sign in with AD credentials.
Click the Save Settings button to apply the configuration.

4. Configure Profile Mapping

Navigate to the Profile Mapping tab to map basic AD attributes to Kentico user profile fields.
Under Basic Attribute Mapping, select the AD attributes for Username, Email, First Name, and Last Name from the dropdowns. You can use the default mappings such as sAMAccountName, mail, givenName, and sn.
Click the Save Mappings button to store the configuration.

5. Test AD Login for End Users

Go back to the Sign In Settings tab and click the Open AD Login button. The AD Login page will open as shown below.
Enter the user's Active Directory username and password, then click the Sign in with AD button.

On successful authentication, you will see the AD login successful message. The user is now signed in to Kentico using their Active Directory credentials.

Thank you for your response. We will get back to you soon.

Something went wrong. Please submit your query again

Contents

How to Configure Active Directory (AD) Integration for Kentico?

Overview