Adding a server

Passwork supports LDAP and AD integration, allowing users to log in to Passwork using their corporate credentials. With LDAP you will be able to:

Start LDAP integration by adding a server:

First, type in the Server name. It will be displayed in Passwork.

Then specify your LDAP server's IP or hostname in the Primary host field. It should include the protocol and port. For example:

You can also add a reserve LDAP server. Passwork will use it if the primary server fails.

If you are using a LDAPS protocol, specify the CN (common name) of the Active Directory certificate instead of the IP address. For example:

You can read more about setting up and using LDAPS on the LDAPS setup page.

Server code is a unique alphanumeric code that is added to a user's login. Passwork reads this code and performs authorization through the LDAP server whose code was specified.

You can leave this field blank if you only have one LDAP server and users without a code will use this server for authorization. If you want to user several LDAP servers, you need to specify a server code for each of them.

For example, if the server code is dc1, then the user's login in Passwork will be user@dc1. If the user specfies the user@dc1 login during authorization, Passwork will detect the dc1 server code, find it in the database and connect to this LDAP server.

If the user specifies a login without a server code, then Passwork will look for an LDAP server that doesn't have one and will try to connect to it.

Specify the login and password of the Service account that has access to users in Active Directory.

Choose the Attribute name for LDAP login from the list:

If user logins are not stored in the default attribute on your LDAP server, specify the name of the required attribute manually. Passwork stores this data in an encrypted format: the saved password can be changed, but cannot be viewed.

In Passwork you can authorize users through a service account or by mask.

First, authorization goes through the service account, then Passwork performs a user search by login and attempts to authorize using the login and password.

This type of authorization can be divided into following stages:

The mask turns a Passwork's user login into a DN string, which is used for authorization in LDAP and AD. DN strings look like this:

Types of DN masks depend on the operating system and server settings.

For example, for Active Directory on Windows, one of these masks usually applies:

For LDAP on Linux:

To use such LDAP attributes as user email and full name in Passwork, specify the names of these attributes.

Usually username is stored in one of the following attributes:

User's email is stored in the mail attribute by default