Configuring LDAP in Anypoint Platform Private Cloud Edition

Configure user management for Anypoint Platform Private Cloud Edition (Anypoint PCE) using LDAP version 3. LDAP configuration is available only for Anypoint PCE deployments.

From Anypoint Platform, click Access Management > External Identity.

A form for configuring LDAP appears.
In the LDAP configuration form, set the connection settings for your LDAP service.
- Host
  
  The host name of your LDAP server. If you’re using TLS, use ldaps:// as the prefix. Otherwise, use ldap://.
- Port
  
  The port used to communicate to your LDAP server. The default ldap port is 389. The default ldaps port is 636.
- Self-Signed Cert
  
  Select this checkbox if you’re using a self-signed certificate on your LDAP server. Use a self-signed certificate for testing your connection to the LDAP server.
- Bind DN
  
  The distinguished name for the user making the LDAP queries. For example, uid=admin,ou=people,dc=mulesoft,dc=com.
- Password
  
  The password for the LDAP server. For example,examplepassphrase.
- Connection Timeout
  
  The timeout frame (in seconds) for a connection. For example, 10.
- Operation Timeout
  
  The timeout frame (in milliseconds) for an operation. For example, 30000.
Set up search bases and filters
- User
  
  The base level for your user search base object. For example, uid=admin,dc=mulesoft,dc=com.
- Group
  
  The base level for your groups search base object. For example, ou=groups,dc=mulesoft,dc=com.
Set the distinguished names for your user and group
- User
  
  The distinguished name for your user search base object. For example,uid={{username}},ou=people.dc=mulesoft,dc=com.
- Group
  
  The distinguished name for your groups search base object. For example, ou=groups,dc=mulesoft,dc=com.
- Search filters
  - User by Username
    
    The search filter to find users by user name. For example, (&(objectClass=inetOrgPerson)(uid={{username}})).
  - User by Email
    
    The search filter to find users by email. For example, (&(objectClass=inetOrgPerson)(mail={{email}})).
  - Group by GroupName
    
    The search filter to find groups by groupName. For example, (&(objectClass=groupOfNames)(cn={{groupName}})).
  - User’s Groups by Username
    
    The search filter to find user groups by userName. For example, (&(objectClass=GroupOfNames)(member=uid={{username}},ou=people,dc=mulesoft,dc=com)).
Map the User fields
- Username
  
  Field that represents the user name. For example, uid.
- Email
  
  Field that represents the email. For example, mail.
- First Name
  
  Field that represents the first name. For example, givenName.
- Last Name
  
  Field that represents the last name. For example, sn.
- ID
  
  ID for your user. For example, uid.
Map the group fields
- Group Name
  
  Field that represents your Group name. For example,cn.
- ID
  
  Field that represents your groups Id. For example, bcd6b4c4-aec5-4493-be1b-8e2e8eecf662.
Save the configuration.