<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Ubuntu;
panose-1:2 11 5 4 3 6 2 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.DefaultFontHxMailStyle
{mso-style-name:"Default Font HxMail Style";
font-family:"Ubuntu",sans-serif;
color:windowtext;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style></head><body lang=EN-US link=blue vlink="#954F72"><div class=WordSection1><p class=MsoNormal><span class=DefaultFontHxMailStyle>Add this or create application.yml in midpoint.home<o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle><o:p> </o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle>auth:<o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle> ldap:<o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle> host: ldaps://ldap.example.edu:3269/dc=example,dc=edu<o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle> manager: bindaccount@example.edu<o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle> password: Password<o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle> dn:<o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle> pattern: sAMAccountName={0}<o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle> search:<o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle> pattern: (sAMAccountName={0})<o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle> subtree: true<o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle><o:p> </o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle>Then under JAVA_OPTS or however you defined -Dmidpoint.home, <o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle>append -Dspring.profiles.active=ldap<o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle><o:p> </o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle>If you want to use a different attribute,<o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle><o:p> </o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle> search:<o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle> pattern: (userPrincipalName={0})<o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle> naming-attr: sAMAccountName<o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle> subtree: true<o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle><o:p> </o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle><o:p> </o:p></span></p><div style='mso-element:para-border-div;border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal style='border:none;padding:0in'><b>From: </b><a href="mailto:PFSJ@senado.leg.br">Paulo Fernandes de Souza Junior</a><br><b>Sent: </b>Monday, April 6, 2020 8:15 AM<br><b>To: </b><a href="mailto:midpoint@lists.evolveum.com">midPoint General Discussion</a><br><b>Subject: </b>Re: [midPoint] Active Directory Authentication in midPoint</p></div><p class=MsoNormal><span class=DefaultFontHxMailStyle><o:p> </o:p></span></p><p><span style='font-size:12.0pt;color:black'>Hi Konstantin, <o:p></o:p></span></p><p><span style='font-size:12.0pt;color:black'><o:p> </o:p></span></p><p><span style='font-size:12.0pt;color:black'>We are using AD authentication, just following the docs in <a href="https://wiki.evolveum.com/pages/viewpage.action?pageId=23167000">https://wiki.evolveum.com/pages/viewpage.action?pageId=23167000</a>, with success. <o:p></o:p></span></p><p><span style='font-size:12.0pt;color:black'><o:p> </o:p></span></p><p><span style='font-size:12.0pt;color:black'>[],<o:p></o:p></span></p><p><span style='font-size:12.0pt;color:black'><o:p> </o:p></span></p><div id=Signature><div><div><div><div><div><p class=MsoNormal style='margin-bottom:12.0pt'><b><span style='font-size:10.0pt;font-family:"Times New Roman",serif;color:#1F497D'>Paulo Fernandes de Souza Jnior</span></b><span style='font-size:12.0pt;font-family:"Times New Roman",serif;color:black'> <br></span><b><span style='font-size:8.0pt;font-family:"Times New Roman",serif;color:#1F497D'>NQPPPS<br></span></b><span style='font-size:8.0pt;font-family:"Times New Roman",serif;color:#17365D'>Senado Federal - </span><span style='font-size:8.0pt;font-family:"Times New Roman",serif;color:#1F497D'>PRODASEN<br></span><span style='font-size:8.0pt;font-family:"Times New Roman",serif;color:#17365D'>Fone: 61 3303.3924</span><span style='font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p></div></div></div></div></div></div><div><p class=MsoNormal><span style='font-size:12.0pt;color:#212121'><img border=0 width=694 height=2 style='width:7.2291in;height:.0208in' id="Horizontal_x0020_Line_x0020_1" src="cid:image002.png@01D60BF3.64B091A0"></span><span style='font-size:12.0pt;color:#212121'><o:p></o:p></span></p><div id=divRplyFwdMsg><p class=MsoNormal><b><span style='color:black'>De:</span></b><span style='color:black'> midPoint <midpoint-bounces@lists.evolveum.com> em nome de Konstantin Tikhonov <Konstantin.Tikhonov@veeam.com><br><b>Enviado:</b> quinta-feira, 2 de abril de 2020 15:00<br><b>Para:</b> midpoint@lists.evolveum.com<br><b>Assunto:</b> [midPoint] Active Directory Authentication in midPoint</span><span style='font-size:12.0pt;color:#212121'> <o:p></o:p></span></p><div><p class=MsoNormal><span style='font-size:12.0pt;color:#212121'> <o:p></o:p></span></p></div></div><div><div><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Tahoma",sans-serif;color:#212121'>Hello.</span><span style='color:#212121'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Tahoma",sans-serif;color:#212121'> </span><span style='color:#212121'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Tahoma",sans-serif;color:#212121'>We’re trying to configure Active Directory authentication (LDAP and SAML) in midPoint but facing various difficulties.</span><span style='color:#212121'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Tahoma",sans-serif;color:#212121'> </span><span style='color:#212121'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Tahoma",sans-serif;color:#212121'>Could you please let us know if it’s possible that our users and admins use their AD accounts to log in midPoint? If yes could you please show the way haw we can do it?</span><span style='color:#212121'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Tahoma",sans-serif;color:#212121'> </span><span style='color:#212121'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Tahoma",sans-serif;color:#212121'>Thanks a lot in advance.</span><span style='color:#212121'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Tahoma",sans-serif;color:#212121'> </span><span style='color:#212121'><o:p></o:p></span></p><p class=MsoNormal><b><span style='font-size:9.0pt;font-family:"Tahoma",sans-serif;color:black'>--</span></b><span style='color:#212121'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:9.0pt;font-family:"Tahoma",sans-serif;color:black'>Best Regards,</span><span style='color:#212121'><o:p></o:p></span></p><p class=MsoNormal><b><span style='font-size:9.0pt;font-family:"Tahoma",sans-serif;color:black'> </span></b><span style='color:#212121'><o:p></o:p></span></p><p class=MsoNormal><b><span style='font-size:9.0pt;font-family:"Tahoma",sans-serif;color:black'>Konstantin </span></b><span style='color:#212121'><o:p></o:p></span></p></div></div></div><p class=MsoNormal><span style='color:#212121'> <o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle><o:p> </o:p></span></p></div></body></html>