Setup Active Directory/LDAP Integration for Cloud & Shared Hosting Platforms

Overview

LDAP Login Cloud catered towards sites hosted on shared web hosts which do not allow to install plugin dependencies such as cURL and PHP LDAP. It also assists in cases where a secure LDAP connection needs to be made between the website hosted on a shared host and an on-premise LDAP Directory.

Download Plugin Pricing Plans

1. Download and install Active Directory/LDAP Integration for Cloud & Shared Hosting Platforms

Method 1:

• From your WordPress dashboard click on Plugins >> Add New



• Search for LDAP Cloud. Install Active Directory/LDAP Integration for Cloud & Shared Hosting Platforms.



• Activate the plugin from your Plugins page.

Method 2:

• From WordPress.org Download Active Directory/LDAP Integration for Cloud & Shared Hosting Platforms.



• Go to Plugins and click on Add New button.



• Click on Upload Plugin.



• Click on Choose File button and select the downloaded plugin ZIP file.



• Click on Install Now button to install the plugin.



• Click on Activate Plugin button.



• Now the Active Directory/LDAP Integration for Cloud & Shared Hosting Platforms plugin is installed and activated. Follow the following steps for plugin configuration.

2. Setup Active Directory/LDAP Integration for Cloud & Shared Hosting Platforms

• Login into wordPress and open the Active Directory/LDAP Integration for Cloud & Shared Hosting Platforms.Click on Register or Login with miniOrange.



• Register/Login into miniOrange account.



• Once you are successfully logged in, click on Plugin Configuration button.



• Select Use miniOrange Cloud LDAP Gateway.





Note: To configure Active Directory/LDAP Integration for Cloud & Shared Hosting Platforms plugin using miniOrange On-Premise LDAP Gateway click here.



• Select the Directory Server from the dropdown list.
• Select the directory server protocol (LDAP/LDAPS) from dropdown.
• Enter the LDAP Server hostname or IP address of the LDAP Server.
• Enter the LDAP Server Port Number if you have custom port number.
• Enter the username and password to establish the connection to your LDAP server.
• Enter the LDAP Search Base and LDAP Search filter for your LDAP implementation.
• Search Base: Provide the distinguished name of the Search Base object. If you have users in different locations in the directory(OU's), separate the distinguished names of the search base objects by a semi-colon(;). eg. cn=Users,dc=domain,dc=com eg. cn=Users,dc=domain,dc=com; ou=people,dc=domain,dc=com.
• LDAP Search Filter: Enter the LDAP Search Filter. You will need to enter the username during LDAP login based on the search filter attribute configured. eg. (&(objectClass=*)(mail=?)), (&(objectClass=*)(|(samaccountname=?)(mail=?)))
• Click on Test Connection and Save.
• Once the connection is successful , you can perform test authentication to verify whether the LDAP Authentication is working fine or not by entering the Username and Password of any LDAP user account.

3. Setup Role Mapping

Note: Role Mapping is optional. If the user do not wish to assign the roles you can skip this step.



• After successful "Test Authentication". Navigate to Role Mapping tab to map the users of LDAP groups with WordPress roles.
• LDAP Groups to WP User Role Mapping: Enter the LDAP group distinguished name in LDAP Group Name and select the WordPress role you want to assign for the members of that group.
• LDAP Group Attributes Name: Specify attribute which stores group names to which LDAP Users belong.
• Click on Enable Role Mapping Role Mapping will automatically map Users from LDAP Groups to below selected WordPress Role. Role mapping will not be applicable for primary admin of wordpress.



• Click on Save Mapping button.

• To test role mapping configuration, enter Username.
• Click on Test Configuration button.
• A new window will open where you can see the results for test role mapping.



Note: WordPress roles will be assigned to the user only after LDAP Login in WordPress site.

4. Setup Attribute Mapping

Note: Attribute Mapping is optional. If the user do not wish to assign the attributes you can skip this step.



• Navigate to Attribute Mapping tab. And configure the basic LDAP attributes.
• To add Custom Attributes enter the attribute name in Custom Attribute Name field.
• To add more custom attributes click on the + button.
• Click on Save Configuration button to save the attributes.



• Enable Attribute Mapping: This option allows to map LDAP user attributes to WordPress user profile attributes after LDAP login.

5. Setup Sign-In Settings

• To configure enable login using LDAP settings to login in WordPress site with LDAP credentials, click on Sign-In Settings.
• Enable LDAP login: This option is disabled by default. You can enable LDAP login once you are done with the "Test Connection & Save" in LDAP Connection Information.
• Authenticate users from both LDAP and WordPress: This option allows users to use either of WordPress credentials or LDAP credentials to login in WordPress site.
• Redirect after authentication: By default it is "None". You can select redirect option for users after login into wordpress site to "Home Page", "Profile Page", "Custom Page".
• Enable Auto Registering users if they do not exist in WordPress: This option is enabled by default and allow the users to register in WordPress after they login into the WordPress site with LDAP credentials.
• Protect all website content by login: You can protect the website contents by enabling this option. The users will need to enter their LDAP credentials while accessing any page of WordPress site.



• miniOrange Authentication and Single Sign-on products have ready integrations with a number of leading providers, these ready solutions allow enterprises quickly increase the security of information and resources without worrying about time for initial set up or future upgrades.