How To: Use Active Directory as the IdP for SSO (without AD FS / with LDAP connector)

Please follow the instructions in the following article to install and configure your SSO connector:

https://auth0.com/docs/connector/install 

To complete the process detailed on this page, you will require the following information:

• Ticket URL - this is unique to each customer and will be provided by the support/implementation team when required.

In addition to the steps above, it is also necessary to modify the profile mappings. To modify the profile mappings:

1. In the connector configuration tool, navigate to the Profile Mapper tab.
2. In the profile mapping code, locate the following code (approximately line 13):
   profile['dn'] = raw_data['dn'];
3. On a new line immediately before this code, add the following code:
   profile['upn'] = raw_data['sAMAccountName'];
4. Finally, click Save.

When using Active Directory with the LDAP connector as an IdP, you can choose to enable Windows Integrated/Kerberos authentication to remove the requirement for users to enter a username/password. This feature is enabled for IP address ranges and is configured by the Civica Learning support team. To use Windows Integrated Authentication, please provide the support/implementation team with the IP address range(s) that should use Windows Integrated Authentication in CIDR format.

Where Windows Integrated Authentication is not used, users are prompted to provide their credentials in a Login dialog box. This dialog box cannot be customised and will look similar to the image below (this is liable to change without notice as part of our ongoing product development):

If you have any questions during the configuration phase, please contact the Civica Learning support team, who will be pleased to help.

Related

• Explained: Using Single Sign-On (SSO) with Civica Learning