Configuration Guide › Authentication Options › Enable Active Directory Authentication

Enable Active Directory Authentication

Authentication is the act of establishing that a user has sufficient security privileges to access the CA GovernanceMinder Portal. To enable Active Directory authentication, set the following properties through the Portal under Administration, Settings, System Properties:

• sage.security.disable.ADAuthentication = false
• security.ldap.server = domain_name (example: your_domain.com)
• (Optional) security.manager.dn = AD_bind_account (example: administrator). The DN may be required only when using SSL authentication.
• (Optional) security.manager.password = AD_bind_account_password
• sage.security.credentials.expiration.seconds = 60
• sage.security.eurekify.keyStore.file = Set when using SSL and adding the AD certificate to a JVM keystore file.
• sage.security.eurekify.keystore.password = Set when using a JVM keystore file for SSL.

  Note: Use separate instructions if you want to use a personal keystore instead of the JVM keystore.

• sage.security.disable.ssl.ADAUthentication = true or false
• sage.default.domain=Active_Directory_domain

Note the following:

• You must have a Login ID filed in the database with the domain name (example: domain\jsmith)
• When logging in, the user must provide the Login ID (example: domain\jsmith). If the Active Directory domain is set as the sage.default.domain property, then domain is not required when logging in, only the Login ID (jsmith).