Identity LDAP
Identity LDAP connects WinnerWare to LDAP so the site can look up users and support directory-driven sign-in behavior.
Overview
This module is used when the organization wants WinnerWare to work with an existing directory rather than maintaining all user identity details only inside the application.
Key Features
- Adds an LDAP Settings page under Settings -> Security.
- Supports host, port, username, password, and search-base configuration.
- Supports secure connection settings.
- Supports username, email, and role-sync scripting options.
- Supports an external key field for user matching.
Configuration
Settings location
After enabling LDAP Authentication, administrators can open:
- Settings -> Security -> LDAP Settings
Main settings
| Setting | Purpose |
|---|---|
| Host | LDAP server host name. |
| Port | LDAP connection port. |
| Username | Account used for directory access. |
| Password | Password for the LDAP access account. |
| Search base | Directory location to search. |
| Secure connection | Turns on secure directory communication. |
| Email host | Host used when generating email values. |
| Allowed externally key | Matching key for external identity behavior. |
| Use script to generate username | Lets the site script username generation. |
| Use script to generate email | Lets the site script email generation. |
| Use script to sync roles | Lets the site script role-assignment behavior. |
Usage
Use this module when WinnerWare should align with a central directory for user discovery or sign-in support.
Developer Notes
- The module adds an LDAP Settings admin menu entry under Security.
- It protects the saved LDAP password through data protection.
- It includes permissions for managing LDAP settings and services for LDAP lookup and external-login handling.