How does Afaria integrate with AD/LDAP

[Former Member]

Hi,

Actually I am new in Afaria 7.

Could someone explain me how this Afaria 7 integrate with the AD server and how the communication happens when a mobile devices tries to register in the Afaria 7 server.

Thanks in Advance

Amit Prakash

[Former Member]

Hi,

how this Afaria 7 integrate with the AD server?

During the installation process you need to decide the Authentication Type you want to use. NT domain base, LDAP-Base, Active Directory. In the installation guide you get all the information required to configure this.

How the communication happens when a mobile devices tries to register in the Afaria 7 server?

You need to understand the central concept of enrollment:

Enrollment is adding unmanaged devices to Afaria device management. Enrollment is complete when a device has connected to its Afaria and received policies. Use enrollment policies, enrollment codes, Afaria applications, and the Afaria Self-Service Portal to enroll devices. All users need to install an Afaria application. The availability and use of the other enrollment tools varies by device type.

In a very general way, this is what happens when you enroll a new device into your Afaria 7.0 MDM.

Please look for the official documentation for more information.

Best Regards,

Erick Ilarraza

[Former Member]

Hi Erick,

First of all thanks a lot for your reply.

Actually for one of our clients we have done the afaria installation and during installation we have not chosen LDAP based / AD . Do we have the leverage to configure after installation?

Where do we exactly have to give the LDAP credential while log in to the SSP or while enrolling the device from afaria app.

1. Will the users enter their emailid/password while log in to the self service portal and will that be authenticated via LDAP server?
2. Do at any point of time, we have to give LDAP credentials for authentication when we embed the tinyurl code in afaria app and enrollments begins?

So when we are talking about the communication

Suppose we have different system

1. Relay Server(only SP installed here and this system is not connected to AD)
2. Afaria server having the AD connectivity with customer end

How will the request take place and propagate within these system when we go through LDAP authentication.

Best Regards,

Amit Prakash

[jigar_salecha]

Hi Amit,

Do u got the answer for your question???

If yes please share??

[Former Member]

Hi,

After installation you can configured from the Afaria console > Setting area>> security section for LDAP configuration.

1. Will the users enter their emailid/password while log in to the self service portal and will that be authenticated via LDAP server?

Yes , user need to use there domain NT login id to login on self service portal .

Eg : If user id is been disabled on active directory the device will be auto unapproved status on afaria console.

2.Do at any point of time, we have to give LDAP credentials for authentication when we embed the tinyurl code in afaria app and enrollments begins?.

Yes if you are enrolling device directly, after tinyurl code it will prompt for username and password you can have that option .