Skip to content

Microsoft Active Directory

Microsoft AD can be used as an authentication provider for Huddo Boards when configured with the AD Federation Service (FS).

Prerequisites

  1. Microsoft AD server/domain with user accounts
  2. Microsoft AD FS deployment accessible from the server running Boards and the users accessing Boards

Outcome

Once configured, users will be able to login to Boards using their Microsoft AD credentials.

AD signin button

ADFS login

Steps

  1. Setup Relying Party Trust
  2. Setup Application Group Configuration

Configuration

The steps above will provide you with the following information that you will need to configure the user service in Boards:

Environment Variable Description Example / Default
MSAD_NAME Name on the login button Microsoft AD
MSAD_FS_URL URL of ADFS server https://adfs.example.com
MSAD_CLIENT_ID Client id from Step 2 above
MSAD_CLIENT_SECRET Client secret from Step 2 above

LDAP

To enable Boards to lookup user & group details from AD via LDAP, you will also need to provide the following environment variables:

Environment Variable Description Example / Default
MSAD_LDAP_URL URL of LDAP server ldap://ad.example.com
MSAD_LDAP_BASE_DN Base DN for LDAP search DC=example,DC=com
MSAD_LDAP_BIND_DN Bind DN for LDAP search CN=Boards,OU=Service Accounts,DC=example,DC=com
MSAD_LDAP_BIND_PASSWORD Bind password for LDAP search

Example configuration:

example