Specifications

to start using MCA immediately. These user defaults are set when MCA is initially configured

(see Configuring the Default User Settings on page 66).

If a user requires authorizations that differ from the MCA defaults, you can use the administrator

Web client to change that user’s profile. See Editing a User Profile on page 58.

The following procedure is for configuring LDAP with Active Directory, which is the most common

LDAP authentication.

To configure LDAP authentication with Active Directory:

1. From the MCA administrator page, click LDAP Configuration in the navigation pane. The

LDAP Configuration page appears as does sample values for LDAP server parameters.

The following LDAP Configuration page illustrates an example of user authentication with

Active Directory.

2. To use an LDAP server to store the user database, select Use LDAP.

3. Type the server name where Active Directory resides in the LDAP Server Name box.

4. Leave LDAP Port No. at the default (389). However, you may need to change this setting

to the global catalog port number (3268) for installations with a large Active Directory

database or if there is a need to authenticate users from multiple/nested organizational

units (OU) or containers (CN).

5. Type the LDAP Search Base information in the box using the format:

CN=<userdirectory>,DC=<domain>,DC=<com>.

NOTICE

To use LDAP authentication with Active Directory, you must have Active Directory set up prior to

configuring MCA. Contact the site administrator to view the Active Directory configuration, and then verify

the following.

• An Active Directory user exists that is used as the LDAP Admin ID. The user does not need any special

rights or permissions.

• Users with name, password, and e-mail information exist as Active Directory users.

• You can ping the MCA server by hostname from the Active Directory server.

When Use LDAP is set, Add User and Bulk Provision Users are not available in the MCA

navigation pane.

If this option is cleared, the user database is stored on the MCA server and the settings on this

page have no affect on authentication.