LDAP User Roles From Group Names Properties

true

Controls whether the application starts up when the user is not assigned any roles.

The name of an LDAP user attribute that will optionally be used to define custom groups/roles.

For example, if LDAPCustomRoleAttribute is set to "employeeType", then the value of that attribute will be returned as a group/role membership for a given user.

A user with the attribute "employeeType=accounting" will be recognized to have "employeeType=accounting" group membership.

The LDAPCustomRoleAttribute can be left blank in order to use only standard LDAP and Active Directory group types.

false

Controls whether LDAP user distinguished names will be used to determine group membership.

If LDAPParseDistinguishedName is set to True, then the value of a given user’s distinguished name will be parsed and returned as a group/role membership for that user. For example, a user with the distinguishedname "cn=User1,ou=People,dc=domain,dc=com" will be recognized to have "ou=People,dc=domain,dc=com" group membership.

If LDAPParseDistinguishedName is set to False, then only standard LDAP and Active Directory group types will be used.

When the user is not assigned any roles and AllowStartupForUserAssignedNoRoles is False, a MessageBox is optionally displayed. If MessageTextForUserAssignedNoRoles is non-empty, the MessageCaptionForUserAssignedNoRoles is used as the MessageBox caption.

When the user is not assigned any roles and AllowStartupForUserAssignedNoRoles is False, a MessageBox is optionally displayed. If MessageTextForUserAssignedNoRoles is non-empty, a MessageBox is displayed and the MessageTextForUserAssignedNoRoles is used as the MessageBox text.

Filters the LDAP and Dodeca user roles leveraged by the application. When a large number of roles are present, but only a limited number of the roles are relevant for the application, one or more RoleFilters can be applied to limit the roles that are valid in the context of the application.

Multiple filters can be applied, one per line, and wildcards and character range matching are supported. For example:

Center — Allows any role ending with the word "Center". [0-9]  — Allows any role starting with a number. User  — Allows the role "User".

See also: RolesRequiredForStartup, RolesToShareViewsWith.

RolesRequiredForStartupFilter.AnyRole

Controls which roles are required to start the application.

AnyRole - allows any user with an assigned role to start the application.

AnySpecificRole - allows any user with an assigned role that matches any of the specified roles to start the application.

AllSpecificRoles - allows any user who matches all of the specified roles to start the application.

See also: RolesRequiredForStartup_SpecificRoles

Identifies the specific role requirements to start the application when the RolesRequiredForStartup property is set to AnySpecificRole or AllSpecificRoles.

The LDAPConnectionProperties that define the LDAP or Active Directory connection that users will be authenticated against.

Login:

The caption displayed to end users on the LDAP Login Dialog.

The distinguished name of a directory entry under which to obtain groups. This should be provided as a fully-qualified distinguished name such as \

false

Whether the authenticated roles obtained are the common name of the groups. By default, the roles obtained are the distinguished name of the group with the BaseDomainName removed.

true

Controls whether the list of users contains only external users or all defined users.

The list of users is obtained when users are allowed to specify a user with whom to share the saved view. The AllUsersExternalOnly setting is not used to authenticate the current user.

CSS

Controls the external authentication protocol used when obtaining external users.

The list of users is obtained when users are allowed to specify a user with whom to share the saved view. The AllUsersExternalProtocol must be set when AllUsersExternalOnly setting is True. The AllUsersExternalProtocol setting is not used to authenticate the current user.

true

Controls whether the authenticated user is allowed to share saved views with everyone.

By default, the user is allowed to share saved views with everyone. The property is typically set to False when the RolesToShareViewsWith and/or UsersToShareViewsWith properties restrict the roles and/or users with whom the user is allowed to share saved views.

RolesToShareViewsWithFilter.None

Controls which roles (i.e. MSAD/LDAP groups) the authenticated user is allowed to share views with.

None - No sharing with individual roles is allowed.

SameRoleAsUser - Sharing is allowed with the roles that the authenticated user is also assigned to.

AllRoles - Sharing is allowed with all roles.

SpecificRoles - Sharing is allowed with the roles identified by the RolesToShareViewsWith_SpecificRoles property.

Identifies the specific role(s) the authenticated user is allowed to share views with when the RolesToShareViewsWith property is set to SpecificRoles.

UsersToShareViewsWithFilter.None

Controls which users the authenticated user is allowed to share views with.

None - No sharing with individual users is allowed.

UsersInSameRoleAsUser - Sharing is allowed with any user who is assigned to a role (i.e. MSAD/LDAP group) that the authenticated user is also assigned to. For instance, if the authenticated user is assigned to GroupA and GroupB, then sharing is allowed with the other users who are assigned to GroupA along with the other users who are assigned to GroupB.

AllUsers - Sharing is allowed with all other users.

SpecificUsers - Sharing is allowed with the users identified by the UsersToShareViewsWith_SpecificUsers property.

Identifies the users in specific roles the authenticated user is allowed to share views with when the UsersToShareViewsWith property is set to UsersInSpecificRoles.

Identifies the specific user(s) the authenticated user is allowed to share views with when the UsersToShareViewsWith property is set to SpecificUsers.