8-2
UserGuide for Cisco Digital Media Manager5.4.x
OL-15762-05
Chapter8 Authentication and Federated Identity
Concepts
•
Synchronize user groups from an Active Directory server. Microsoft Active Directory is the only
LDAP implementation that we support in this release.
•
Use federation services with a SAML 2.0-compliant IdP to support SP-initiated “single sign-on”
login authentication in your network (following an initial synchronization to a Microsoft Active
Directory Server that populates the DMM user database).
Note We support your use of one—and only one— IdP server with Cisco DMS 5.4.
Glossary
Timesaver Go to terms that start with...
[
A
|
C
|
D
|
F
|
I
|
L
|
O
|
P
|
R
|
S
|
U
|
X
].
A
Active Directory
Microsoft implementation of LDAP. A central authentication server and user store. Active Directory is
the only LDAP implementation that we support in this release.
Active Directory
forest
A domain-straddling combination of Active Directory trees within an organization that operates
multiple Internet domains. Thus, the forest at “Amalgamated Examples, LLC” might straddle all trees
across example
.com
, example
.net
, and example
.org
.
Or, to use Cisco as a real-world case-study, one forest could straddle cisco.com and webex.com,
among others.
Note This CiscoDMS release does not support Active Directory forests.
ActiveDirect ory
tree
A subdomain-straddling combination of IdPs throughout one Internet domain. T hese IdPs operate
collectively on behalf of the Internet domain’s constituent subdomains. Thus, the “tree” at
example.com might encompass all of the IdPs to authenticate user sessions within subdomains such
as these:
•legal
.example.com
•sales
.example.com
• support
.example.com