Operation Manual

 Minimum Expiration Time - Controls the minimum amount of time (in days) that the users

can set.

 Maximum Expiration Time - Controls the maximum amount of time (in days) that the users

can set.

Whitelist

If the whitelist is enabled, only users in the configured LDAP groups or with the email domains (like

example.com) specified in the list can login. Wildcards can be used for domains (e.g. *.example.com).

LDAP groups must be specified by their distinguished names, such as

CN=mygroup,CN=Users,DC=mycompany,DC=com.

Blacklist

Users in LDAP groups or with the email domains (like example.com) specified in the blacklist will not

be permitted to log into the system, even if they are in the whitelist. Wildcards can be used for

domains (e.g. *.example.com). LDAP groups must be specified by their distinguished names, such as

CN=mygroup,CN=Users,DC=mycompany,DC=com.

Note: Wildcard entries can only contain one star and it should be always at the beginning of the string and

followed by a period, (e.g. *.example.com, *.com).

2.3 LDAP Provisioning

Members of groups listed here will have their user accounts automatically created at first login.

LDAP Group

This is the list of currently selected groups.

 Common Name / Display Name - The display name given to the user or group.

 Distinguished Name - The distinguished name given to the user or group. A distinguished name is

a unique name for an entry in the Directory Service.