1
Does FileVista support authenication off of Active Directory or an LDAP database?
Question asked by Cosmo Mathieu - 7/17/2015 at 9:17 AM
Answered
We are looking to implement FileVista as an affordable document management system. But we are looking to manage users centrally via AD and not having to create duplicated accounts in FileVista to mirror the LDAP users.
 
Is there no way to hook up filevista directly to AD and not tie them to users in the filevista database? We have close to 200+ users and I want to centrally manage them within AD.
 
Thank you for your help,

5 Replies

Reply to Thread
1
Cem Alacayir Replied
Employee Post Marked As Answer
Hi,
Yes, "authentication against AD on regular login page" and "bulk-import AD users" features are already available since v6.5.5. You still need to import users as FileVista needs to know their names and store relationships/permissions in its own database. However this does not mean you need to manage them constantly in both places. You do an import once and user passwords are still in AD. Maybe occasionally you may need to rename a user (not likely) or update a user's email.
 
See these screenshots:
 
1. You can bulk import users from AD via this menu option:
 
 
2. In this window, you can search AD and import selected or all users. Note that, when an imported user tries to log into FileVista, his password will be still authenticated against AD so it will never be out of sync.
 
 
Note that no web.config settings are required (ie. no need to change authentication mode of IIS) with this new AD import feature. Imported users will still login at the regular login page (there will be no browser challenge/response window as in previous versions - which is still supported though but new method is preferred)
0
Cosmo Mathieu Replied
Awesome! Sorry, I could not find this feature being promoted on the FileVista website. I have one more question. Do you need to have license for those users to access (not manage) the files?
0
Cem Alacayir Replied
Employee Post
Yes, FileVista is licensed according to the number of users that are created and that can login. So it doesn't matter if they are imported or created manually. If you need to import 200+ users, you should consider Enterprise (unlimited users) license. One level down license is X-Large and it allows 100 user accounts.
0
Cosmo Mathieu Replied
Awesome! This was most helpful. Is there any doc on how to setup the LDAP authentication? I'd like to look further into it.

Thanks,
0
Cem Alacayir Replied
Employee Post
Actually, if you just follow the above screenshots, you will be all set. In the "Import Users" window, just type your AD domain name and administrator credentials (if required, may also work when you leave it empty) and click "Find All". If users are populated, this means you can connect to your AD store. Then when you import some users, they should be able to authenticate against AD on the login page as the Windows Server already knows where to authenticate them by looking at the domain name part in their user name (eg. Contoso\SomeUser).

Reply to Thread