Authentication in IAP Using LDAP

Authentication

The following diagram shows the overall authentication flow in IAP using LDAP.

Figure 1: Authentication Flow Using LDAP

1. User provides username and password.

2. LDAP server in AAA platform authenticates users and returns one of the following:

   • Reject: IAP displays "Invalid credentials."
   • Access-Accept: IAP allows user to login.
   • Challenge: IAP displays "Generate token and retry."

3. AAA Platform also returns a vendor specific attribute ( Type 2 per RFC 2865, 5.6). For example:

   • Vendor ID = 47688 (Itential)
   • Name = Itential-user-Group
   • Number = 1
   • Value = User group of the user obtained from LDAP.