Differences

This shows you the differences between two versions of the page.

--- ldap_integration [2019/07/25 12:49] – external edit 127.0.0.1
+++ ldap_integration [2020/08/25 16:18] – [Login Lucy through Active Directory (LDAP)] lucy
@@ Line 3: / Line 3: @@
 LUCY has an LDAP API, which allows the administrator to:
-  * import recipients
+  * import recipients and users directly from your directory service
-  * import users (LUCY administrators)
+  * authorize users in the Admin console, Enduser portal and Awareness website
-directly from your directory service.
+==== Sync tool for Windows ====
+Besides LDAP API, there is a tool that can be run on Windows machines to sync your Active Directory groups with Lucy, see more [[ldap_synchronization_tool|here]].
@@ Line 70: / Line 72: @@
 It is possible to configure LUCY autoupdate recipient list of from an LDAP Server.
-Note, this configuration will not be active if there are global settings for recipients import enabled.
+:!: Note, this configuration will not be active if there are global settings for recipients import disabled.
 {{ :autoupdate_recepients.png?600 |}}
@@ Line 103: / Line 106: @@
   * 4.Phone - recipient phone number
+To configure other recipient fields to match Active Directory attributes go to the LDAP Fields Associations page (Settings > LDAP Settings > LDAP Fields Associations):
+{{ ::ldap_fields_associations.png?500 |}}
+:!: Recipient's custom fields are also supported.
+===== Login Lucy through Active Directory (LDAP) =====
+Lucy allows users to login with their Active Directory account.
+=== Admin console & Enduser portal ===
+In order users to login Admin console or Enduser portal you should first import accounts to Lucy from your Active Directory. See [[ldap_integration#importing_users_via_ldap|this]] section for more details. \\
+:?: Please note that to login Lucy you should use an appropriate user role that can be configured within the LDAP Update Preferences page (Settings > LDAP Settings > LDAP Update Preferences). \\
+User roles used to access Admin console: **Administrator, View, User, Supervisor**. \\
+User role used to access Enduser portal: **Enduser**. \\