Not an issue but looking for clarification regarding multi-org access

[willmulder]

Looks like this approach can only integrate with one organisational-structure/active-directory... Any idea how to use to connect Farcry security to more than one AD? Thanks

[webonix]

just an idea without any guarantees extend the User Directory Plugin you are using, one for each organisation structure Then add to plugin list

On Fri, 26 Nov 2021 at 00:05, willmulder @.***> wrote:

Looks like this approach can only integrate with one organisational-structure/active-directory... Any idea how to use to connect Farcry security to more than one AD? Thanks

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/farcrycore/plugin-farcryldap/issues/4, or unsubscribe https://github.com/notifications/unsubscribe-auth/AABVDXZKY57B6AIDMQMMEIDUNZNFNANCNFSM5IY4GXXA . Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

--

Andrew Mercer http://webonix.net/ | <webonix:org community="Open" /> http://webonix.org/ http://twitter.com/webonix http://twitter.com/webonix

[justincarter]

Looks like this approach can only integrate with one organisational-structure/active-directory... Any idea how to use to connect Farcry security to more than one AD? Thanks

That's right, this plugin will only allow you to specify the configuration of a single AD/LDAP service to connect to.

I'm not sure if there's a way for you to proxy access to multiple AD/LDAP directories, but that might be an option if such middleware exists? Otherwise this plugin could be used as a starting point for a multi-LDAP plugin.

If you wanted to do that, you'd start by;

• creating a new content type such as "farLDAP.cfc" in packages/types with most of the same properties found in packages/forms/configLDAP, this would let you persist the configuration for each LDAP service
• adding an additional property to farLDAP for the name of the LDAP service so that you could offer some kind of "Organisation" dropdown for the user to select when they are logging in
• change the displayLogin webskin to include the Organisation dropdown (which effectively selects the objectid of the farLDAP record to use for configuration)
• modify all code referring to application.fapi.getConfig("ldap", ...) to refer to the selected Organisation (farLDAP) record when looking up configuration data (you'd probably put the objectid of the selected farLDAP record in the url scope)