LDAP Authentication / Integration

Option 1: LDAP Authentication

  • When logging into CMS4Schools, users contained within the district directory server will authenticate against the directory server rather than against the CMS4Schools username and password. The CMS4Schools username must match a directory server username
  • When enabled, all User Account authentication for CMS4Schools happens via LDAP
  • Requirements
    • Directory server (tested with Active Directory & E-Directory) more servers likely possible, but may require a longer configuration period
    • VPN Tunnel with IPSec using a firewall on district side connecting to the VPN connection at CMS4Schools server
    • VPN Tunnel access to the district directory server
  • Setup
    • District firewall configuration for VPN tunnel to terminate to CMS4Schools firewall VPN tunnel
    • VPN access to directory server
    • Provide CMS4Schools a directory server username and password that has access to perform directory server lookups
    • Provide CMS4Schools domain, field names from directory server to look at for authenticating
  • Fees: Setup - $750; Annual - $500

Option 2: LDAP Integration

  • When using CMS4Schools User Accounts, users contained within district directory server will authenticate against the directory server rather than CMS4Schools username and password. The User Account Admin within CMS4Schools will be kept updated by directory server. Fields to be updated can be modified to suit district's needs.
  • CMS4Schools User Account Admin will generate a list of all LDAP groups on directory server. District can select which groups may be given a CMS4Schools User Accounts.
  • For each LDAP Group, district can assign permissions granted to those groups within CMS4Schools
    • CMS4Schools Faculty Listing Groups
    • Navigation Builder
    • CMS4Schools Modules
    • Faculty Page Type
  • Requirements
    • Directory server (tested with Active Directory & E-Directory) more servers likely possible, but may require a longer configuration period
    • VPN Tunnel with IPSec using a firewall on district side connecting to the VPN connection at CMS4Schools server
    • VPN Tunnel access to the district directory server
  • Setup
    • District firewall configuration for VPN tunnel to terminate to CMS4Schools firewall VPN tunnel
    • VPN access to directory server
    • Provide CMS4Schools a directory server username and password that has access to perform directory server lookups
    • Provide CMS4Schools domain, field names from directory server to look at for authenticating and for User Account user information data
  • Data Pull
    • CMS4Schools User Account Admin is populated with district requested fields to be updated from LDAP at 1 AM nightly
  • Fees: Setup - $1950, Annual - $900
     

For more information or to add this feature to your current account, send an email to info@cms4schools.com.