Connect Mediasite to a LDAP directory

Use Management Portal to connect Mediasite to a LDAP directory that stores the credentials of users and groups on your network.

To connect Mediasite to a LDAP directory: 

1.  Click Security > Security Providers > Add New and specify the settings needed to connect to the directory:

Settings

Details

Name

Enter the name of the provider.

Provider Type

Choose, LDAP Directory.

Server Path

Enter the path of the directory. The path should include the FQDN or IP address of the server where the directory is located and the port. The default LDAP port is 389.  The server path will have the following format:

LDAP://servername.company.net:389

SSL

Select this check box if you already have Secure Socket Layer configured on your system. When SSL is used, the SSL port should be used in the Directory Server Path. The default LDAP SSL port is 636.

Base DN

Enter the distinguished name for the top level of the directory.

Username/Password

Enter the credentials needed to connect to the directory.

Use Anonymous authentication

Select this check box to connect to an LDAP directory that does not require user credentials.

 

SecurityProvider_Basic

Security Provider (Active Directory) basic settings

 

2.  Click Advanced Settings to view additional settings.

3.  Specify the method used to access group information in the directory:

Settings

Details

Access group membership via the user directory entry

Select this radio button to determine group membership by inspecting the group membership property of the user directory entry.

Access group membership via a group search

Select this radio button to determine group membership by searching the group member property of group directory entries.

Do not Use Fast Bind even if the directory declares support for Fast Bind

Select this option to disable concurrent binds (fast binds) for this directory connection. In most scenarios, you will leave this option unselected. However, if you have a directory that falsely claims fast bind support; select this option to ensure the directory connection works as expected.

 

4.  Specify user configuration settings, used to locate users in the directory:

Settings

Details

Users DN

The distinguished name for the user directory.

User Id Property Name

The attribute used to identify a User ID in the directory.

User Display Name Property Name

The attribute used when displaying users.

User Email Property Name

The attribute used to identify the primary email address for the user.

Group Membership Property Name

The attribute used to identify a user’s group memberships.

User LDAP Search Filter

The filter to use when searching the directory for users.

 

Security Provider (Active Directory) advanced settings, user configuration

 

5.   Specify group configuration settings, used to locate groups and identify group membership:

Settings

Details

Groups DN

The distinguished name for the group directory.

Group Id Property Name

The attribute used to identify a group in the directory.

Group Display Name Property Name

The attribute used when displaying groups.

Group Member Property Name

The attribute used to identify a group member in the directory.

Group LDAP Search Filter

The search filter to use when searching the directory for groups.

Perform a nested group search

This check box is selected by default for LDAP. When selected, each sub-group within a group is searched for users as part of a group search. Clear this check box if you don’t want to search subgroups for users.

Determine group membership using security groups

When selected, security groups are searched including nested ones. Distribution lists are not searched.

 

Security Provider (Active Directory) advanced settings, groups configuration

 

6.  Specify search configuration and user profile provisioning settings:

Settings

Details

Page Size

The maximum number of entries displayed in the search results.

Automatically create User Profiles on Login to My Mediasite or Management Portal

Select to this to have Mediasite create user profiles automatically using the User Email Property Name and a Display Name Attribute.

Display Name Attribute

Enter the attribute that will be used to create the user profile. You can customize the display name using concatenated strings that include plain text strings and LDAP/AD attributes.

 

Security Provider (Active Directory) advanced settings, search and user profile provisioning

 

7.  Click Save. Click Test Connection to verify the directory connection using the settings above.