Authentication sources¶

Admin → Users → Auth sources connects the workspace to a directory so people can sign in with their corporate credentials, and imports users, groups, and departments from it.

Creating a source: connection, credentials, and directory mapping.

Create a source¶

Connection¶

Field	Notes
Name	Required; how the source is identified in the list
Directory type	LDAP or Active Directory
Server, Port	Required; 389 is the default plain port, 636 the usual TLS one
Base DN	Required; where the search starts in the directory
Provider	The LDAP implementation, for example `ldapAdvanced`
Enable TLS	Encrypts the connection
Anonymous bind	Connect without credentials; disables the search user and password
Automatic user registration	Create the local account the first time the user signs in
AD sign-in policy	Honour the directory's logon restrictions

Credentials¶

Search user and Password: the account the workspace uses to read the directory. The form warns when the password is empty, and leaving it empty while editing keeps the stored one, so you can change the server without re-entering the secret.

Directory mapping¶

Field	Purpose
User identifier	The attribute that identifies a user, usually `uid`
Users filter	The LDAP filter that selects who can sign in
Inactive users OU	Where disabled accounts are moved or found

Test before saving¶

Test connection validates the server, the port, and the credentials without saving. A success message means the bind worked; an error explains whether the host or the credentials failed. Test again after any change to TLS or the search user.

Import and synchronise¶

Import users lists the directory accounts with their state — importable, already imported, or not importable — and only the importable ones can be selected.
Sync groups and the Departments tab bring the directory structure into the workspace.
Each of these reports a result; check it rather than assuming the import finished.

Export and import the configuration¶

Download configuration produces a JSON file with the source settings and no password. Importing it offers update existing or save as new, which is how you replicate a working source between workspaces.

Permissions¶

This page requires PM_USERS with the authentication-source permission. See Permission reference.

Users — accounts and their status.
Sign in — how directory users sign in.
Password recovery — why directory accounts cannot reset their password here.