Fields: Add/Edit LDAP Authentication Server

If you use Lightweight Directory Access Protocol (LDAP) server that includes patron logins, Portfolio can connect to the server to verify patron authentication into secured profiles. You must complete the fields correctly to connect to the LDAP server.

By authenticating logins through an LDAP authentication server, services such as My Account and seamless holds (bypassing the OPAC login) will not be available in Portfolio. Portfolio requires Symphony Web Services to provide these services through the Searching interface.

If the system uses the Symphony ILS, the administrator can set up LDAP to use Symphony Web Services to authenticate to Symphony. This allows Portfolio to use the web services to communicate to the ILS. For more information, see "LDAP Setup" in the Symphony Web Services Setup Guide.

Security > Authentication Servers > Add LDAP Server

Security > Authentication Servers > Edit Server

Code

Specifies a unique code for the server (up to 30 characters). This code is used to identify the authentication server on the Authentication Servers page and on any other pages that display the authentication server code.

Name

Specifies the system name of the LDAP authentication server (up to 255 characters) for the specified language. This name is used to identify the LDAP server on the Authentication Servers page and in the Security Options area of the Add/Edit/Copy Profile page. For more information, see Fields: Add/Edit/Copy Profile.

For this field, you can also specify an alternate name for a specific language. Choose the language from the drop-down list of supported languages, then enter the localized name in the field.

Note: If your web browser is configured to use a display language that is not supported by Portfolio and you have chosen to display the Admin console in a language other than the default language (en_US), the language that displays in the drop-down list of supported languages defaults to US English.

If a localized name already exists for a specific language, the software displays that language name differently in the drop-down list. When you enter a localized name for a specific language, the language name appears with a “++” suffix. If you clear the localized name for a specific language, the software displays the language name without the different formatting.

Host Name

Specifies the name, URL, or IP address (up to 255 characters) of the host system for the LDAP server.

Port

Specifies the port number used to access the server (up to 255 characters). The most common port number for LDAP authentication is “389”.

Base Distinguished Name

Specifies the value for the base DN in which the user record resides (up to 255 characters). For example, for the user “uid=myuser,ou=People,o=myschool”, the base DN would be “ou=People,o=myschool”.

Object Class

Specifies the name of the LDAP class, such as “account” or “posixaccount” (up to 255 characters).

UID Name

Specifies the name of the DN element where the user ID is found (up to 255 characters).

User Distinguished Name

Specifies the LDAP server login name (up to 255 characters). This field is required only when the server requires a login name.

Password

Specifies the password to use with the User Distinguished Name (up to 255 characters). This field is required only when the password is required by the LDAP server.

Online Registration URL

When you enter a URL in the field (up to 255 characters), the program activates the "Register" link in the Portfolio patron login. When the patron click on the link, the page that you designate opens. You can link to a page that your library has created that explains the registration process, or to a page that allows the user to register or begin the registration process.

  • LDAP online registration—Enter the full URL for the LDAP online registration page to the Online Registration URL field.
  • In-person registration—You can also add a URL to a page that prepared by your library that explains how a patron can obtain a library card.

Related topics