MarkLogic Server 11.0 Product DocumentationExternal Security Configuration Help
An external security is an external authentication and authorization config of the system. For each config, configure the following:
- external security name is the name of an external security.
- description is an optional field to describe the user.
- authentication specifies external authentication.
- cache timeout specifies login cache timeout.
- authorization specifies the authorization scheme.
- LDAP server uri specifies URI referring to the LDAP server.
- LDAP base specifies starting point for the search.
- LDAP attribute specifies a LDAP attribute that matches the username in xdmp:login or basic authentication.
- LDAP default user specifies a default user used by MarkLogic server. When bind method is simple, LDAP default user should be a DN (Distinguished Name).
- LDAP password specifies password of the default LDAP user.
- LDAP bind method specifies the method to connect to the LDAP server.
- LDAP memberof attribute specifies a LDAP attribute for the groups of a user.
- LDAP member attribute specifies a LDAP attribute for the groups of a user.
- LDAP start TLS specifies whether to start TLS request.
- LDAP-certificate is an optional field to specify a PEM encoded certificate for mutual authentication or external binding to the LDAP server.
- LDAP-private-key is an optional field to specify a private key corresponding to ldap-certificate.
- LDAP nested lookup specifies whether LDAP user authentication will perform nested group lookup or not. If set to true, nested group lookup will occur.
- LDAP remove domain specifies whether remove domain before matching with ldap-attribute.
- LDAP negative cache timeout The LDAP negative cache timeout, in seconds.
-
An LDAP server is configuration for talking to an LDAP server. For each config, configure the following:
-
A SAML server is configuration for talking to an SAML server. For each config, configure the following:
-
An OAuth server is configuration for talking to an OAuth server. For each config, configure the following:
Buttons and Tabs:
- The Summary tab displays a list of all of the currently configured external securities.
- The Configure tab allows you to edit existing external securities.
- The Test tab allows you to test existing external securities.
- The Create tab allows you to create new external securities.