cerberus icon indicating copy to clipboard operation
cerberus copied to clipboard

[Feature Request] Implement an LDAP auth connector

Open j-lowry opened this issue 8 years ago • 2 comments

Lots of corporate environments do not have Okta, OneLogin, etc to authenticate with. Good ol' LDAP/Active Directory is the only identity management solution available to us.

Steps to reproduce: Don't have Okta or OneLogin. Have LDAP Earliest version known to be an issue: v0.10.0

j-lowry avatar Jan 31 '17 00:01 j-lowry

Yes, the feature makes sense. This is not currently a priority for the core Cerberus team but we'll gladly accept a pull request if someone wants to implement.

Implementing the Okta connector recently only took about a day or two but implementing one for LDAP is probably quite a bit more work.

Also, for anyone considering this, LDAP tends to get setup behind a corporate firewall so ports would need to be opened for Cerberus to communicate with it. A nice advantage of products like Okta and OneLogin is that you don't need to open your corporate firewall up for a single app (like Cerberus), plus Multi-Factor Authentication (MFA), etc.

tlisonbee avatar Jan 31 '17 01:01 tlisonbee

No, I hear all of that, preaching to the choir. A lot of environments are not quite that far along with their identity management, so the LDAP solution is the next best option.

j-lowry avatar Jan 31 '17 17:01 j-lowry