Setting up LDAP integration

Overview

You can use the same password you use to log in to your Windows domain as the TimeTracker NX password.

Specifically, by sharing the passwords of accounts managed by Active Directory,
you can centrally manage user passwords in Active Directory.

Active Directory is a service that uses LDAP, and can be used by linking with that LDAP.

Notes

• Linking is only possible with Active Directory, and linking with LDAP servers other than Active Directory is not possible.
• For frequently asked questions about LDAP integration, please refer to the following link. : Setting up LDAP integration

Setting up LDAP integration

Setting up LDAP integration involves the following two steps.

1. Set up the information for integration with the Active Directory that manages the domain.
2. Set up the users to integrate with LDAP

Setting up Active Directory integration

First, enable Active Directory using the following procedure.

1. Click the login name in the global navigation of TimeTracker NX.
   

   

2. Select "System Settings".

3. Click "System Operation" in the global navigation.
   

   

4. Select "LDAP integration" from the menu on the left.

5. Click the "Edit" button.

6. Set the LDAP integration information. The input items are as follows.

   No.	Item	Description
   1	Perform LDAP integration	Check if you want to perform LDAP integration.
   2	LDAP path	Enter only if you want to perform LDAP integration. For details, please refer to the following link. : "How to set the LDAP path (#LDAP_Path)"

   For the specific details of the LDAP path to be set, please contact the LDAP administrator of each company.

7. Click the "Save" button.

How to set the LDAP path

1. Check the Active Directory settings.
   For the format of the LDAP path, refer to the LDAP path displayed by entering the following command.

   whoami /FQDN 
2. Set the LDAP path based on the string output in 1.
   
   • Start the path with "LDAP://".
     
   • The settings will differ depending on the scope you want to apply, as in the "Example" below.

Example

Set the string shown in the example below based on the string obtained in step 1 above.
We will explain using the following string obtained with whoami /FQDN as an example.

CN=Okamoto Naoya,OU=Development Division 2,OU=Development Department,OU=Second Business Division,DC=mydomain,DC=local 

• Case 1: When targeting users within a portion of the company (within the Second Business Division)
  

  LDAP://[Name of LDAP server (※)]/OU=Second Business Division,DC=mydomain,DC=local 
• Case 2: When targeting the entire company

  LDAP://[Name of LDAP server (※)]/DC=mydomain,DC=local 
  ※Please include the domain name.

Set up users to be linked with LDAP

In Step 1, you were able to enable LDAP.
Next, set up users to be linked with LDAP.

On the "User Settings" screen, enter the "LDAP login name" of the user to be linked.
For details, see the following link. : "User settings"

• Set the login name including the domain name. Example: okamoto@mydomain.local
• If you do not want to use LDAP integration for a user, leave the field blank and they can log in with their TimeTracker NX password.

You can set them all at once in Excel by using "Import/Export User List".

For details, see the following link. : "Import/Export User List"

Notes

If all users are set as LDAP integration targets, they will not be able to log in if a problem occurs.
Example: Unable to connect to Active Directory server, etc.
We recommend that you leave at least one user who is not to be integrated with LDAP.

Logging in after successful LDAP integration settings

After configuring LDAP integration, enter the following in the login screen.

• Login name: TimeTracker NX "Login name"
• Password: Password for LDAP connection (password used to log in to Windows)

I can't log in even if I enter the login name for the LDAP connection.