diff --git a/doc/Extensions/Authentication.md b/doc/Extensions/Authentication.md index eee0915b9d..d7c526d36d 100644 --- a/doc/Extensions/Authentication.md +++ b/doc/Extensions/Authentication.md @@ -110,6 +110,12 @@ This is similar to LDAP Authentication. Install __php_ldap__ for CentOS/RHEL or If you have issues with secure LDAP try setting `$config['auth_ad_dont_check_certificates']` to `1`. +##### Require actual membership of the configured groups + +If you set ```$config['auth_ad_require_groupmembership']``` to 1, the authenticated user has to be a member of the specific group. Otherwise all users can authenticate, but are limited to user level 0 and only have access to shared dashboards. + +##### Sample configuration + ``` $config['auth_ad_url'] = "ldaps://your-domain.controll.er"; $config['auth_ad_dont_check_certificates'] = 1; // or 0 @@ -117,4 +123,5 @@ $config['auth_ad_domain'] = "your-domain.com"; $config['auth_ad_base_dn'] = "dc=your-domain,dc=com"; $config['auth_ad_groups']['admin']['level'] = 10; $config['auth_ad_groups']['pfy']['level'] = 7; +$config['auth_ad_require_groupmembership'] = 0; ```