Setting Up LDAP Authentication

Jamf School Documentation
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US
  1. In Jamf School, navigate to Organization > Settings in the sidebar.
  2. Select the Authentication payload.
  3. Choose "LDAP(s)" from the Authentication Method pop-up menu.
  4. If you want users and groups to be created or updated automatically when a user tries to log in, select the Automatically create users that don’t exist locally checkbox.
  5. If you do not want Jamf Parent to use the LDAP server for authentication, select the Force local authentication for Jamf School Parent checkbox. If this option is selected, Jamf Parent will use local authentication.
  6. Enter the LDAP server IP or FQDN and port. 389 is default for LDAP, and 636 is default for LDAP over SSL.
  7. To secure the communication using SSL, select the Use SSL checkbox.
  8. Choose the directory type from the Directory Type pop-up menu. Jamf School supports Microsoft Active Directory and Apple Open Directory.
  9. Enter the base DN of your LDAP server in the Base DN field. For example: "dc=myschool,dc=com".
  10. If your server supports anonymous binding, select the Bind to this LDAP server anonymously checkbox.
    Note:

    Active Directory does not support authentication when binding anonymously.

    • Enter the full DN of the user you want to bind with. For example: "CN=ldap_proxy, OU=users, DC=myschool, DC=com".

    • Enter the password for the bind user.

  11. Click Test Connection to test the connection to your LDAP server.
  12. If the connection is successful, click the Save button.