Domain Settings
Domain List
Domain Settings support both LDAP and OIDC SSO (e.g., GoTrust) authentication providers. Administrators can add and manage different types of authentication domains.
Administrators can view all authentication domain configurations in the system.
- List Information: Includes domain ID, name, type, creation time, and sort order.
- Sort Order Importance: The list order directly determines the display order of authentication methods in the login page dropdown menu.
- Search Function: Supports domain name search — enter keywords to quickly find specific domains.
Actions:
- View / Edit / Delete
- Sync Domain Users
- Bind Test
Add Domain
When adding or editing a domain, configure the following fields:
Basic Information
- Domain Name: The display name of the domain.
- Type: Two options are available:
- LdapAuthenticateStrategy: For LDAP or Microsoft Active Directory.
- DatabaseAuthenticateStrategy: SOSI’s built-in username/password authentication.
LDAP Connection Settings
| Field | Description |
|---|---|
| Server | IP or hostname of the LDAP server |
| Port | Connection port number |
| Base DN | The Base DN string used by the LDAP server |
| Bind DN | The Bind DN string used by the LDAP server |
| User Account Attribute | The LDAP attribute name used for authentication |
| User Display Name Attribute | The attribute field for the user’s display name |
| Email Attribute | The attribute field for the user’s email address |
| Authentication Method | Choose between “simple” and “anonymous” |
TLS and Encryption Settings
TLS Verification Method: Four options are available, depending on the LDAP server’s supported methods:
- VERIFY_NONE
- VERIFY_PEER
- VERIFY_FAIL_IF_NO_PEER_CERT
- VERIFY_CLIENT_ONCE
Encryption Method: Options include “None”, “simple_tls”, and “start_tls”.
- SSL Certificate: If the encryption method is not “None”, you may enter the SSL certificate. This field is encrypted.
- SSL Key: If the encryption method is not “None”, you may enter the SSL key. This field is encrypted.
Advanced Settings
Identity Object Format: Two options are available:
- Distinguished Name
- User Principal Name
Filter Conditions:
- User Filter: The filter string used to authenticate general users on the LDAP server.
- Admin Filter: The filter condition used to authenticate administrators on the LDAP server.
Sync Settings:
- Sync Account: The LDAP server user account used for the sync function.
- Sync Account Password: The password for the LDAP sync account. This field is encrypted.
