Umbraco Active Directory integration

1
votes

I'm new to Umbraco and I configured it to use Active Directory for login following the official documentation (https://github.com/umbraco/UmbracoDocs/blob/master/Reference/Security/index.md#authenticating-with-active-directory-credentials). The behavior is a bit odd.

Before I configured the AD integration, I was able to to login to Umbraco with the email/password defined upon installation. After the integration, I could login with the same email but with my AD password so I guess that the integration kind of work...

However, now, I'd like some other people to login on the site via their AD credential, however, I have no idea how to achieve that. If I invite user, it creates an account with his email but he has to define a password, so it's not AD integrated. Same thing occurs if I try to create a new user.

So at the end of the day, I have no idea how to integrate reliably AD with Umbraco. Does anyone already achieve this and can give me pointers?

I'm running Umbraco 7.10.2.

1
umbracoumbraco7

1 Answers

0
votes

You need to first create a User account in Umbraco so that you can assign the necessary permissions etc. This is a standard Umbraco User and needs to correspond to the AD username. I'm not sure though that the Umbraco User needs a designated password though; it's possible you can just let Umbraco auto-generate the password and they will be able to log in with the AD credentials.

To fully integrate Umbraco with AD in the way you're expecting would require some extra code on your part to query AD and pull in the users, auto-generate and link them to a corresponding Umbraco User with an auto-generated password. It's doable, just will take some creative coding on your part.

Update:

If you look in the Umbraco Log after attempting to log in as an Active Diretory user without a corresponding Umbraco User you will most probably find an error with the following message:

The user <UserName> does not exist locally and currently the ActiveDirectoryBackOfficeUserPasswordChecker doesn't support auto-linking, see http://issues.umbraco.org/issue/U4-10181

The referenced Issue has more details available: http://issues.umbraco.org/issue/U4-10181