Skip to main content
Version: v2

User Federation

Canner Enterprise also supports the login through User Federation. Many enterprises already have existing databases to store user names, passwords, or other credentials. In this case, Canner Enterprise’s User Federation can synchronize and integrate with the existing user data.

LDAP/AD Provider​

Canner Enterprise can directly map the user data originally stored in LDAP and Active Directory to the system.

Advanced: Custom User LDAP Filter​

image

(Screenshot from Canner Enterprise SSO module)

Canner Enterprise provides Custom User LDAP Filter to filter the objects you want to import. Here, use the OR method to fill in the roles under multiple specific departments As shown in the figure, if you select the DN of a particular user; you can pick out multiple users and import them.

For the syntax of Filter, please refer to: https://confluence.atlassian.com/kb/how-to-write-ldap-search-filters-792496933.html

As this tutorial mentions, the "filter" here can be granular. For example, it will filter out if the user is a member of any or all of the four groups (fire, wind, water, heart).

(&(objectCategory=Person)(sAMAccountName=*)(|(memberOf=cn=fire,ou=users,dc=company,dc=com)
(memberOf=cn=wind,ou=users,dc=company,dc=com)(memberOf=cn=water,ou=users,dc=company,dc=com)
(memberOf=cn=heart,ou=users,dc=company,dc=com)))