PDF Estimated Time To Read This: 2 – 4 minutes
Continuing with my series of blogs on the latest LDAP settings for PD Place™, this post is going to focus on employee group LDAP-related functionality. (Check out parts 1 and 2 if you haven’t had a chance to. They cover an intro to LDAP settings and some key preferences.)
The Logic Behind Employee Group Updating from LDAP
When a user logs in to a PD Place installation that is integrated with an LDAP server, if that installation is configured to update the user’s employee groups, this is the behind-the-scenes process that takes place:
- First, the base record for fetching the employee group information is retrieved. This record can either be the user’s LDAP record itself, or the user’s associated school LDAP record.
- Which record is used to retrieve the employee group information in Step 1 is controlled via the “Base LDAP Record for Fetching Employee Group” preference.
- After that, the list of LDAP records that contain the employee group information is retrieved from the base record using the employee group link field.
- This list of the employee group LDAP records is filtered using the special LDAP filter specified in the “LDAP Employee Group Link Filter” preference. Note: You will need to specify the value here.
- The name of the employee group link field is specified in the “LDAP Employee Group Link Field” preference.
- Please note that if the value of the “LDAP Employee Group Link Field” preference is set to the special value “[subgroup]”, then instead of retrieving the employee group LDAP records via a link field from the base record, these records will be the set of LDAP sub-entries of that record. Also, if there is no value specified in the “LDAP Employee Group Link Field” preference, then the list of employee group LDAP records will be simply be the base record itself.
- When the final list of employee group LDAP records is retrieved, the actual employee group names are retrieved from the name field of each LDAP record. The name of this name field is specified in the “LDAP Employee Group Key Mapping” preference.
- Something to remember: employee groups in PD Place are not automatically updated from LDAP. This means that if one of the employee groups retrieved from the LDAP server is not already in PD Place, then the user will not be associated with that employee group.
Stay Tuned
In my next blog for this series, I’m going to cover an easy way to update employee groups in PD Place from an LDAP server.
Don’t forget, you can contact our support team for further information about the LDAP integration features of PD Place, by phone at 519.641.7727 or 1.800.650.8882 or by email at PDPlace_Support@coresolutions.ca.
