Mapping a Directory to an Application

Mapping a directory to an application defines the user-base for an application. Sometimes known as 'application provisioning', directory mappings determine which user stores will be used when authenticating and authorizing a user's access request. Read more about users and groups.

When you defined an application, you chose a default directory for that application to use. Crowd also allows you to map multiple directories to each application. This allows each of your applications to view multiple user directories as a single repository.

To map a directory to an application,

  1. Crowd Administration Console にログインします。
  2. Click the Applications tab in the top navigation bar.
  3. Click View for the application you wish to map.
  4. Click the Directories tab.
  5. Select the new directory from the drop-down list and click Add.
  6. The new directory will be added to the bottom of the list of mapped directories. You can use the blue up-arrow or down-arrow to move a directory higher or lower in the order:

    Why directory order is important
  7. Now choose how group memberships are aggregated over the directories you've just mapped. Group memberships are used to determine authorization permissions. See Effective memberships with multiple directories for more information. 
    On the Directories tab check Aggregate group memberships across directories to use the 'aggregating membership' scheme. When the checkbox is clear 'non-aggregating membership' is used.
  8. You now need to choose which users within the directory may authenticate against the application. You have two choices:
    • To allow all users within the directory to authenticate against the application, change Allow all to Authenticate to True, then click Update.
    • To allow only specific groups of users within the directory to authenticate against the application, see Specifying which Groups can access an Application.
  9. Next, you should define the application's ability to add or update users in the directory. Click the Permissions tab and set the directory permissions for the application.
    Note that updates are handled differently, depending on the membership aggregation scheme you selected in step 7. See Directory update operations.

Screenshot: 'Application — Map Directories'


Crowd ドキュメント

最終更新日 2017 年 11 月 28 日


Powered by Confluence and Scroll Viewport.