<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Ubuntu;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.DefaultFontHxMailStyle
{mso-style-name:"Default Font HxMail Style";
font-family:Ubuntu;
color:windowtext;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif">Hello Guys,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif">Thanks a lot for help. We’ll try and I’ll get to you with feedback about results.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Tahoma",sans-serif;color:black;mso-fareast-language:CS">--<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Tahoma",sans-serif;color:black;mso-fareast-language:CS">Best Regards,<o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Tahoma",sans-serif;color:black;mso-fareast-language:CS"><o:p> </o:p></span></b></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Tahoma",sans-serif;color:black;mso-fareast-language:CS">Konstantin.</span></b><span lang="RU" style="mso-fareast-language:RU"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> midPoint <midpoint-bounces@lists.evolveum.com> <b>
On Behalf Of </b>Jason Everling<br>
<b>Sent:</b> Monday, April 6, 2020 5:12 PM<br>
<b>To:</b> midPoint General Discussion <midpoint@lists.evolveum.com><br>
<b>Subject:</b> Re: [midPoint] Active Directory Authentication in midPoint<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span class="DefaultFontHxMailStyle">Add this or create application.yml in midpoint.home<o:p></o:p></span></p>
<p class="MsoNormal"><span class="DefaultFontHxMailStyle"><o:p> </o:p></span></p>
<p class="MsoNormal"><span class="DefaultFontHxMailStyle">auth:<o:p></o:p></span></p>
<p class="MsoNormal"><span class="DefaultFontHxMailStyle"> ldap:<o:p></o:p></span></p>
<p class="MsoNormal"><span class="DefaultFontHxMailStyle"> host: ldaps://ldap.example.edu:3269/dc=example,dc=edu<o:p></o:p></span></p>
<p class="MsoNormal"><span class="DefaultFontHxMailStyle"> manager: <a href="mailto:bindaccount@example.edu">
bindaccount@example.edu</a><o:p></o:p></span></p>
<p class="MsoNormal"><span class="DefaultFontHxMailStyle"> password: Password<o:p></o:p></span></p>
<p class="MsoNormal"><span class="DefaultFontHxMailStyle"> dn:<o:p></o:p></span></p>
<p class="MsoNormal"><span class="DefaultFontHxMailStyle"> pattern: sAMAccountName={0}<o:p></o:p></span></p>
<p class="MsoNormal"><span class="DefaultFontHxMailStyle"> search:<o:p></o:p></span></p>
<p class="MsoNormal"><span class="DefaultFontHxMailStyle"> pattern: (sAMAccountName={0})<o:p></o:p></span></p>
<p class="MsoNormal"><span class="DefaultFontHxMailStyle"> subtree: true<o:p></o:p></span></p>
<p class="MsoNormal"><span class="DefaultFontHxMailStyle"><o:p> </o:p></span></p>
<p class="MsoNormal"><span class="DefaultFontHxMailStyle">Then under JAVA_OPTS or however you defined -Dmidpoint.home,
<o:p></o:p></span></p>
<p class="MsoNormal"><span class="DefaultFontHxMailStyle">append -Dspring.profiles.active=ldap<o:p></o:p></span></p>
<p class="MsoNormal"><span class="DefaultFontHxMailStyle"><o:p> </o:p></span></p>
<p class="MsoNormal"><span class="DefaultFontHxMailStyle">If you want to use a different attribute,<o:p></o:p></span></p>
<p class="MsoNormal"><span class="DefaultFontHxMailStyle"><o:p> </o:p></span></p>
<p class="MsoNormal"><span class="DefaultFontHxMailStyle"> search:<o:p></o:p></span></p>
<p class="MsoNormal"><span class="DefaultFontHxMailStyle"> pattern: (userPrincipalName={0})<o:p></o:p></span></p>
<p class="MsoNormal"><span class="DefaultFontHxMailStyle"> naming-attr: sAMAccountName<o:p></o:p></span></p>
<p class="MsoNormal"><span class="DefaultFontHxMailStyle"> subtree: true<o:p></o:p></span></p>
<p class="MsoNormal"><span class="DefaultFontHxMailStyle"><o:p> </o:p></span></p>
<p class="MsoNormal"><span class="DefaultFontHxMailStyle"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From: </b><a href="mailto:PFSJ@senado.leg.br">Paulo Fernandes de Souza Junior</a><br>
<b>Sent: </b>Monday, April 6, 2020 8:15 AM<br>
<b>To: </b><a href="mailto:midpoint@lists.evolveum.com">midPoint General Discussion</a><br>
<b>Subject: </b>Re: [midPoint] Active Directory Authentication in midPoint<o:p></o:p></p>
</div>
<p class="MsoNormal"><span class="DefaultFontHxMailStyle"><o:p> </o:p></span></p>
<p><span style="font-size:12.0pt;color:black">Hi Konstantin, <o:p></o:p></span></p>
<p><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
<p><span style="font-size:12.0pt;color:black">We are using AD authentication, just following the docs in <a href="https://wiki.evolveum.com/pages/viewpage.action?pageId=23167000">https://wiki.evolveum.com/pages/viewpage.action?pageId=23167000</a>, with success. <o:p></o:p></span></p>
<p><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
<p><span style="font-size:12.0pt;color:black">[],<o:p></o:p></span></p>
<p><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
<div id="Signature">
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span style="font-size:10.0pt;font-family:"Times New Roman",serif;color:#1F497D">Paulo Fernandes de Souza Jnior</span></b><span style="font-size:12.0pt;font-family:"Times New Roman",serif;color:black">
<br>
</span><b><span style="font-size:8.0pt;font-family:"Times New Roman",serif;color:#1F497D">NQPPPS<br>
</span></b><span style="font-size:8.0pt;font-family:"Times New Roman",serif;color:#17365D">Senado Federal -
</span><span style="font-size:8.0pt;font-family:"Times New Roman",serif;color:#1F497D">PRODASEN<br>
</span><span style="font-size:8.0pt;font-family:"Times New Roman",serif;color:#17365D">Fone: 61 3303.3924</span><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black">
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:#212121"><img border="0" width="694" height="2" style="width:7.2291in;height:.0208in" id="Horizontal_x0020_Line_x0020_1" src="cid:image001.png@01D60C38.1DE2C0F0"><o:p></o:p></span></p>
<div id="divRplyFwdMsg">
<p class="MsoNormal"><b><span style="color:black">De:</span></b><span style="color:black"> midPoint <<a href="mailto:midpoint-bounces@lists.evolveum.com">midpoint-bounces@lists.evolveum.com</a>> em nome de Konstantin Tikhonov <<a href="mailto:Konstantin.Tikhonov@veeam.com">Konstantin.Tikhonov@veeam.com</a>><br>
<b>Enviado:</b> quinta-feira, 2 de abril de 2020 15:00<br>
<b>Para:</b> <a href="mailto:midpoint@lists.evolveum.com">midpoint@lists.evolveum.com</a><br>
<b>Assunto:</b> [midPoint] Active Directory Authentication in midPoint</span><span style="font-size:12.0pt;color:#212121">
<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:#212121"> <o:p></o:p></span></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:#212121">Hello.</span><span style="color:#212121"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:#212121"> </span><span style="color:#212121"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:#212121">We’re trying to configure Active Directory authentication (LDAP and SAML) in midPoint but facing various difficulties.</span><span style="color:#212121"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:#212121"> </span><span style="color:#212121"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:#212121">Could you please let us know if it’s possible that our users and admins use their AD accounts to log in midPoint? If yes could you please show the way haw we can
do it?</span><span style="color:#212121"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:#212121"> </span><span style="color:#212121"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:#212121">Thanks a lot in advance.</span><span style="color:#212121"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:#212121"> </span><span style="color:#212121"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Tahoma",sans-serif;color:black">--</span></b><span style="color:#212121"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Tahoma",sans-serif;color:black">Best Regards,</span><span style="color:#212121"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Tahoma",sans-serif;color:black"> </span></b><span style="color:#212121"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Tahoma",sans-serif;color:black">Konstantin
</span></b><span style="color:#212121"><o:p></o:p></span></p>
</div>
</div>
</div>
<p class="MsoNormal"><span style="color:#212121"> <o:p></o:p></span></p>
<p class="MsoNormal"><span class="DefaultFontHxMailStyle"><o:p> </o:p></span></p>
</div>
</body>
</html>