LDAP Administration Login (with SSO / Single Sign-On support)

by robertpiplica

Rating: no rating ( write a review )

Downloads: <25

Enables authentication over LDAP to the Shopware 6 administration interface. Single sign on services (SSO) are also supported (e. g. Kerberos or Shibboleth).

Annually €24.58* /month €348.00 * €295.00* /year 15.23% discount In comparison to the regular monthly price

Monthly €29.00* /month Cancelable monthly

Compatible with:

6.1.0 - 6.6.9.0

Includes:

Free trial month

The subscription starts with a free trial month during which it can be canceled at any time.

All updates

During the subscription all released updates are included for free

Support from the Extension Partner

In case you have any questions or problems with your extension you can always ask the Extension Partner for help during the subscription.

Description

About the Extension

LDAP Administration Login

This extension enables authentication over LDAP to the Shopware 6 administration.
Single sign on services (SSO) are also supported (e.g. Kerberos or Shibboleth).

Functionality

In the settings you have to configure a so-called LDAP bind user. With the help of this bind user, the extension will search for the authenticating user via LDAP on each login to administration interface. For the LDAP user search a filter can be configured. If the user was found and the password matches, a new Shopware user is automatically created and the user will be directly logged in. The data for the new Shopware user will be fetched via LDAP. A cronjob periodically updates the data of the created Shopware users (e. g. name changes in directory service or account will be deleted in directory service etc.). LDAP will be accessed read-only by the extension.

Regular Shopware users are still able to log in without LDAP authentication.

Details

Available: English, German
Latest update: 3 December 2024
Publication date: 27 January 2020
Version: 1.3.0
Category: Administration

Resources

Reviews (0)

Write a review

If you downloaded this extension you can write a review in the Shopware Account.

Write a review

No reviews found.

About the Extension Partner

robertpiplica

See all extensions

Partner Status

Shopware
Extension Partner

Details

Ø-Rating: 5

Average rating of 5 out of 5 stars
Partner since: 2018
Extensions: 4

Support

Based in: Germany
Speaks: German, English
Response time: Very quickly

Important

Before purchasing, please use the trial version to make sure that this extension is compatible with your Shopware environment.

Required PHP modules

ldap
openssl

LDAP Version

Currently only protocol version 3 is supported.

Configuration

Hostname of LDAP server

Here you have to specifiy the host name or the IP address of the directory service to which you want to connect via LDAP (e.g. openldap.example.org or 120.14.6.17).

Port of LDAP server

Here you have to specifiy the port number on which the directory service listens for LDAP connections (usually 389).

Encryption Protocol

Select the type of encryption to use for the LDAP connection. Please note when using LDAPS usually a special port has to be configured (usually 636).

Bind user DN

Here you have to specify the full DN of the bind user (e.g. exampledomain\ldap-user or cn=ldap-user,dc=example,dc=org). This user searches for user accounts via LDAP on each login or while synchronization cronjob is running. LDAP will be accessed always read-only.

Bind user password

Here you have to specify the associated password for the bind user which you have defined above.

Base DN of users

Here you have to specify the DN with which to search for LDAP users who are allowed to log in to your Shopware administration interface (e.g. ou=shopwareusers,dc=example,dc=org)

User filter pattern

Here you have to define the filter constraint with which to search for LDAP users. You can specifiy any LDAP search filter (RFC 4515 or RFC 2254), e.g. cn={$username} or (&(cn={$username})(objectClass=person)(objectClass=user)). The placeholder {$username} will be replaced with the value that the user enters in the username field of the login mask.

User's first name attribute

Here you have to specify the attribute to use as user's first name within Shopware (e.g. givenName).

User's last name attribute

Here you have to specify the attribute to use as user's last name within Shopware (e.g. sn).

User's mail attribute

Here you have to specify the attribute to use as mail address within Shopware.

Testing

After you have saving the configurations, you can perform a test login in the "LDAP connection test" block to test the connection data. No user is created in Shopware during the test, only the LDAP authentication is tested.

Cronjob

After successful configuration of the extension, you should configure the cronjob for the synchronization of user data:

php bin/console ropildapadminlogin:synchronise-users