Testing LDAP

On the LDAP Configurations page, there is a button that allows testing of either one-step authentication or two-step authentication  LDAP configurations.

One-Step Authentication 

1. Click the Settings tab.
2. Select LDAP Configuration.
3. Check the box next to "Authenticate via LDAP" to enable LDAP authentication for your institution.
4. If LDAP authentication is enabled, check the box next to "Update Roles From LDAP Groups" to update users’ roles based on their LDAP group membership and mapping rules
5. Click the Test LDAP button,
6. Enter the fully qualified path. The path will be auto-populated if you have already entered it on the LDAP Configuration Info screen.
7. Remove the user variable portion of the fully qualified path before executing the test. (/{0}@aais.com)
8. Enter the LDAP administrator user name and password.
   
   The admin user specified here should have permission to search the entire LDAP or Active Directory structure or results may be inconsistent.
9. Enter the Search On attribute (directory service attribute that the filtering is performed on (example: sAMAccountName))
10. Enter the Search For attribute (value to be searched for). This field supports wildcards. (examples: student, stud*)
11. Click Run Test.
    • The test will provide a list of all attributes found for that object
    • If the test process can bind to the LDAP server but no matches are found, then the results window will read “No results were found in...”
    • If the test process is not able to bind to the LDAP server, and error message will appear

    

Two-Step Authentication 

1. Click the Settings tab.
2. Select LDAP Configuration.
3. Click Test LDAP button
4. Enter a test user name and password.
   
   

   

5. Click Run Test.
6. The Response box will indicate whether the user was authenticated or if there was a problem encountered.