LDAP authentication

This topic describes how to define LDAP settings for importing users.

Overview

You can also integrate LDAP with LoadRunner Enterprise by defining the LDAP settings in the Authentication Type page. This enables individuals in organizations that use LDAP for managing user credentials and permissions, to access LoadRunner Enterprise with their LDAP credentials, without the need for the administrator to first add them to the list of authorized users.

Handling existing internal users

All users must be in the LoadRunner Enterprise database before they can be authenticated using any one of the authentication types. For example, if you have not imported LDAP users, all LDAP users must be in LoadRunner Enterprise before you switch to LDAP authentication.

For details on importing users from LDAP, see Import users from LDAP.

Define LDAP settings for importing user

To enable you to import users from an LDAP directory to the Users list in LoadRunner Enterprise Administration, you must define your LDAP import settings.

When you import users from an LDAP directory, LoadRunner Enterprise copies attribute values from an LDAP directory into LoadRunner Enterprise. For each imported user, the following attribute values are copied:

Userid (UID)	The name that identifies a user as an authorized user. The UID attribute value is mapped to the User Name field in LoadRunner Enterprise.
Full Name, Description, and Email	Optional attributes that are used to populate the Full Name, Description, and Email fields for each user imported from an LDAP directory.

To define LDAP settings for importing users:

In LoadRunner Enterprise Administration, select Configuration > Site Configuration, and click the Authentication Type tab.
Expand the LDAP section.
Click the Add LDAP button , enter the LDAP server name, and a description (optional).

Note: Some of the headers for configuring the LDAP server changed since ALM 12.x. For a list of the field header mappings, see LDAP server field mappings.
In the Directory provider URL box, enter the LDAP server name or domain name.
To enable LDAP over a secure communication, select Use SSL.
In the Main Details tab, under LDAP Authentication Type:
- Select Anonymous account to enable you to import users from the LDAP server using an anonymous account.
- Select Simple user account to enable you to import users from the LDAP server using an authorized (search-entitled) user account and password. If you select this option, the following options are enabled:
  - In the Authentication Principal box, enter the authorized user name.
  - In the Authentication Credentials box, enter the password.
Under Data Retrieving Settings:
1. In the Port box, enter the port of the LDAP server.
2. In the Directory Base box, enter the LDAP directory name.
  
  Note: The Directory base is a distinguished name of a node in the LDAP hierarchy and is used as a root for operations retrieving data.
3. In the Base Filter box, define filter criteria.
Under Field Mapping Settings, define the corresponding LDAP field names, which include user name, full name, and email. Note that User Name is a required field.
Under LDAP Type, select the LDAP server type: LDAP or Active Directory.
The Users tab displays a list of users that were imported from the specified LDAP server. For details, see the user settings table.
Click Check Connection to check if any LDAP servers have lost connectivity, such as, for example, if to verify that the admin DN exists in the LDAP server.
Click Save to save the LDAP directory.

As each LDAP directory is created, it is added to the LDAP server grid. You can add or delete LDAP directories from this grid.
Click Select this authentication type to set LDAP as the authentication type for all users.
After defining your LDAP import settings, you can import users from an LDAP directory to the Users list in LoadRunner Enterprise Administration. For details, see Import users from LDAP.

Export LDAP server details to Excel

This task describes how to export information displayed in the LDAP server grid to an Excel file.

In LoadRunner Enterprise Administration, select Configuration > Site Configuration and click the Authentication Type tab.
Expand the LDAP section.
Click the Export to XLS button . Data from the grid is saved to an Excel file and downloaded to the Downloads folder of the client user.

Handle user name conflicts

This task describes how to resolve user name conflicts.

Import users as described in Import users from LDAP. If conflicts occur when importing users from LDAP, the Conflict in import users from LDAP dialog box opens, and displays a list of users with the same name.

For each user with the same name, select the user (or users) and choose one of the following options to resume the process:

Option	Description
	Auto Rename. Assigns a new name to the selected user by adding a suffix.
	Override. Overrides the existing user information.
	Skip. Does not import the selected users (default).
	Rename. To manually assign a new name to a user, select a user and click the Rename button. In the New User Name box, enter the new name.
Username	Displays the LDAP user name.
New Username	After selecting an option or assigning a name manually, displays a preview of the new name.
Solution	Displays the solution for handling the user name conflict: Auto Rename, Override, Skip, Rename.

Click OK to save your changes and close the dialog box.

LDAP server field mappings

Some of the field mapping headers for configuring the LDAP server changed since ALM.

The following table displays the field mapping headers used in ALM and in LoadRunner Enterprise.

	ALM	LoadRunner Enterprise
General Settings	Server Name	Server Name
	Directory provider URL	Directory provider URL
	Use LWSSO	Use SSL
		Description
LDAP Authentication Type	Anonymous	Anonymous account
	Simple	Simple user account
	Authentication Principal	Authentication Principal
	Authentication Credentials	Authentication Credentials
Data Retrieving Settings	Directory Base	Directory Base
	Base Filter	Base Filter
		Port
	Result record limit
	Timeout
Field Mapping Settings	User Name	User Name
	Full Name	Full Name
	Description
	E-mail	Email
	Phone
Use default values for	Use default values for	LDAP Type