Chapter 6 Authentication and Federated Identity

Reference

Table 6-1 Elements for the Authentication Mode (continued)

 

Element

Description

 

 

 

 

Last Configured IdP

While it names an IdP explicitly, this value does not necessarily identify the IdP in current use.

 

 

 

 

Instead, this value describes only your most recent attempt to import configuration metadata

 

 

 

 

from an IdP, without regard for whether the attempt failed or succeeded.

 

 

 

 

This element is visible only in federation mode. It becomes populated for the first time after

 

 

 

 

you attempt at least once to import IdP metadata.

 

 

 

 

Tip

Compare this value to the “Last Successfully Configured IdP” value. When they differ, you know that

 

 

 

 

 

your latest such attempt actually failed.

 

 

 

 

(SP Configuration File)

Provides the means to export configuration metadata from DMM. Click Export to begin

 

Export

browsing for a locally mounted drive and folder where you can save the exported config file.

 

 

 

 

Later, you will import this file into your IdP.

 

 

 

 

This element is visible only in federation mode.

 

 

 

 

Enable Authentication

Helps you to test whether your federation mode settings are correct and will allow SSO for your

 

Test

ordinary users.

 

 

 

 

Check this check box to expose UI elements that are otherwise hidden. Clear this check box to

 

 

 

 

hide such elements.

 

 

 

 

Test Username

Enter a username that your IdP already knows. Do not use the superuserusername. This

 

 

 

 

element is visible only while the Enable Authentication Test check box is checked.

 

 

 

 

Test User Password

Enter the password that corresponds to the test username. This element is visible only while

 

 

 

 

the Enable Authentication Test check box is checked.

 

 

 

 

 

 

LDAP Configuration Area

 

 

 

 

 

 

 

Anonymous

Enables or disables an anonymous connection between your DMM appliance and your

 

 

 

 

Active Directory server.

 

 

 

 

An anonymous connection is suitable when you want to see or use public information on

 

 

 

 

 

the Active Directory server.

 

 

 

 

In contrast, if you want to see or use privileged information on your Active Directory

 

 

 

 

 

server, the server will require you to enter login credentials to prove that you have

 

 

 

 

 

sufficient access rights.

 

 

 

 

In the latter case, your Active Directory server will reject any attempt to log in anonymously.

 

 

 

 

This check box is available to you only when you choose LDAP mode or federation mode.

 

 

 

 

Host

Enter the routable IP address or DNS-resolvable hostname for the Active Directory server. This

 

 

 

 

field is available to you only when you choose LDAP mode or federation mode.

 

 

 

 

Port

Enter the TCP port number that your Active Directory server uses for communications. This

 

 

 

 

field is available to you only after you choose LDAP mode or federation mode.

 

 

 

 

The Active Directory port number by default is:

 

 

 

 

389 for LDAP communications.

 

 

 

 

636 for LDAPS (Secure LDAP, or LDAP over SSL) and SSO communications.

 

 

 

 

Administrator DN

Enter the distinguished name of the Active Directory server administrator.

 

 

 

 

This field is available to you only after you choose LDAP mode or federation mode and

 

 

 

 

uncheck the Anonymous check box.

 

 

 

 

Tip

See administrator DN, page 6-3.

 

 

 

 

 

 

 

 

User Guide for Cisco Digital Media Manager 5.2.x

 

 

 

 

6-32

 

 

 

OL-15762-03

 

 

 

 

 

 

Page 78
Image 78
Cisco Systems 5.2.x manual Export, Later, you will import this file into your IdP, Sufficient access rights