Q1: When setting up active directory, we used several test credentials that were all valid and created a profile at the time but have now since been revoked. We are unable to find the option to delete these unnecessary profiles.
Answer
We have not included the delete option for Active Directory as admin can edit and change the configuration if the server is changed. If required, we can manually delete the configuration directly from the database by executing a SQL query. (if the customer request for the SQL query, please check the DB type with customer and request it with the product team).
Email Draft
Hi Ravi,
Thank you for reaching out to Prolaborate Support.
We have not included the delete option for Active Directory, as admins can edit and change the configuration if the server is changed. If required, we can manually delete the configuration directly from the database by executing a SQL query.
If you want to remove it, please let us know type of DB you are using for Prolaborate, and we will check with our team and share the SQL query with you.
Please feel free to reach out to us if you have any other questions.
Reference
Ticket ID: #9668
Subject: Questions in AD
Department: Prolaborate Support
Q2: When I add myself as an Active Directory user and attempt to login, I get an “Invalid Credentials” error - but if I just enter my username without “@sandia.gov” I am able to gain access. This occurs seemingly if I am in either an active directory group or user. With the default super admin, we are able to login using admin@prolaborate.com. Is there a way to enable the @sandia.gov suffix?
Answer
AD user login is based on the name given to the username field in the Active Directory side. To enable the suffix, one needs to add the @sandia.gov to the username field on the Active Directory side.
Reference
Ticket ID: #9668
Subject: Questions in AD
Department: Prolaborate Support
Q3: As our installation is set up now, any user can visit the (ADFS) link to our Prolaborate installation and thus consume a license. It is not an optimal solution. Do you have any other customers using ADFS, and that might have a better solution to prevent users than manually delete them?
Description
The Client tried to combine their AD – group and ADFS in order to avoid adding users manually to a Prolaborate User Group Membership. But this enabled any user in the ADFS to get into the prolaborate which consumed a license. So the Client asks how to prevent users from getting into prolaborate instead of deleting them.
Answer
The feature for enabling SSO groups is on the pipeline and will be available from v4.4
Tagsintegration , sso, setting up active directory