• management
• Management
• ConnectionOptionsAd

Interface ConnectionOptionsAd

Options for the 'ad' connection

interface ConnectionOptionsAd {
agentIP?: string;
agentMode?: boolean;
agentVersion?: string;
brute_force_protection?: boolean;
certAuth?: boolean;
certs?: ConnectionCertsAd;
disable_cache?: boolean;
disable_self_service_change_password?: boolean;
domain_aliases?: ConnectionDomainAliasesAd;
icon_url?: string;
ips?: ConnectionIpsAd;
kerberos?: boolean;
set_user_root_attributes?: Management.ConnectionSetUserRootAttributesEnum;
signInEndpoint?: string;
tenant_domain?: string;
thumbprints?: ConnectionThumbprintsAd;
upstream_params?: ConnectionUpstreamParams;
non_persistent_attrs?: ConnectionNonPersistentAttrs;
key: string: any;
}

Hierarchy (View Summary)

• ConnectionOptionsCommon
  • ConnectionOptionsAd

Indexable

Accepts any additional properties

Index

Properties

agentIP?agentMode?agentVersion?brute_force_protection?certAuth?certs?disable_cache?disable_self_service_change_password?domain_aliases?icon_url?ips?kerberos?set_user_root_attributes?signInEndpoint?tenant_domain?thumbprints?upstream_params?non_persistent_attrs?

Properties

OptionalagentIP

agentIP?: string

OptionalagentMode

agentMode?: boolean

OptionalagentVersion

agentVersion?: string

Optionalbrute_force_protection

brute_force_protection?: boolean

OptionalcertAuth

certAuth?: boolean

Enables client SSL certificate authentication for the AD connector, requiring HTTPS on the sign-in endpoint

Optionalcerts

certs?: ConnectionCertsAd

Optionaldisable_cache

disable_cache?: boolean

When enabled, disables caching of AD connector authentication results to ensure real-time validation against the directory

Optionaldisable_self_service_change_password

disable_self_service_change_password?: boolean

When enabled, hides the 'Forgot Password' link on login pages to prevent users from initiating self-service password resets

Optionaldomain_aliases

domain_aliases?: ConnectionDomainAliasesAd

Optionalicon_url

icon_url?: string

Optionalips

ips?: ConnectionIpsAd

Optionalkerberos

kerberos?: boolean

Enables Windows Integrated Authentication (Kerberos) for seamless SSO when users authenticate from within the corporate network IP ranges

Optionalset_user_root_attributes

set_user_root_attributes?: Management.ConnectionSetUserRootAttributesEnum

OptionalsignInEndpoint

signInEndpoint?: string

Optionaltenant_domain

tenant_domain?: string

Optionalthumbprints

thumbprints?: ConnectionThumbprintsAd

Optionalupstream_params

upstream_params?: ConnectionUpstreamParams

Optionalnon_persistent_attrs

non_persistent_attrs?: ConnectionNonPersistentAttrs

Settings

Member Visibility

• Protected
• Inherited

ThemeOSLightDark

On This Page

Properties agentIPagentModeagentVersionbrute_force_protectioncertAuthcertsdisable_cachedisable_self_service_change_passworddomain_aliasesicon_urlipskerberosset_user_root_attributessignInEndpointtenant_domainthumbprintsupstream_paramsnon_persistent_attrs