| Section | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|
|
...
integrates with an external LDAP/AD system and is in full control of user authentications. Use the LDAP Security Manager in this situation. Refer to Configuring the LDAP Security Manager for In-house if your Live Formsfrevvo and LDAP server are both located behind your firewall (on-premise.) Refer to Configuring the LDAP Security Manager LDAP(s) for Cloud tenants if you want to connect your Live Formsfrevvo cloud tenant to your on-premise LDAP server.
...
| Info |
|---|
frevvo only supports/certifies the LDAP Security Manager when is running in the tomcat container. Refer to our Supported Platforms for the list of Application Servers supported/certified by frevvo. |
...
Retrieving Custom Attributes from the LDAP Server
When a user is successfully authenticated by the LDAP security manager, retrieves the following basic user information from the LDAP server:
Last Name
First Name
Email address
Using a business rule, you can populate controls in your form with this information.
There are many attributes available in Active Directory. View this website for a partial list. Single and multi-value attributes are supported. Active Directory custom attributes can be retrieved for users in a tenant using the LDAP Security Manager.
Additional custom attributes can be retrieved from the LDAP server by typing the attribute names in the Custom field on the LDAP Configuration screen and writing a business rule to pull that information into your form.
...
| Note |
|---|
The manager attribute maps to the built-in data - subject.reports. to. This means you can retrieve this value in a rule or use subject.reports.to to specify flow navigation if you configure the manager attribute in your LDAP tenant. |
Multi-value Attributes
Attributes with more than one value are also supported. For example, The carLicense attribute can return multiple licenses. You can write a rule to populate dropdown options with the specified car license values. Make sure the carLicense attribute is configured in the Custom field of the LDAP Configuration screen and of course, there are multiple carLicense attributes, each one containing a different value for the dropdown options, set up for appropriate users on the LDAP server. 
...