LDAP & SSO Authentication

Table of Contents

Prerequisites

  • BiG EVAL needs access to an LDAP / Active Directory controller/server. To do this, the service account of BiG EVAL needs access rights on the LDAP server. Usually this means that the service account must be an LDAP managed account as well.
  • The browser used on the client machine when opening the BiG EVAL frontend, must redirect the users login credentials via NTLM or Kerberos to the BiG EVAL server. How to do this, is documented in the manual of your browser.

Activating LDAP & SSO Authentication

  1. Use a text-editor to edit the appsettings.json file of BiG EVAL.
  2. Add the configuration-setting “authentication” with the value “windows” under the server-property or ensure it is configured exactly how it is shown in the following picture.

  3. Save the appsettings.json file.
  4. Restart the BiG EVAL Windows Service.
  5. Import users from the LDAP / Active Directory and assign roles to them.