Advanced LDAP Configuration Combinations
There are a limited number of valid combinations of advanced LDAP configuration parameters:
User DN Template
userDnTemplate
(Required)principalRegex
(Optional)
User Search by Attribute
userSearchBase
(Required)userAttributeName
(Required)userAttributeTemplate
(Optional)userSearchScope
(Optional)principalRegex
(Optional)
User Search by Filter
userSearchBase
(Required)userSearchFilter
(Required)userSearchScope
(Optional)principalRegex
(Optional)
Advanced LDAP Configuration Precedence
The presence of multiple configuration combinations should be avoided. The rules below clarify which combinations take precedence when present.
userSearchBase
takes precedence overuserDnTemplate
userSearchFilter
takes precedence overuserSearchAttributeName