Setting up External Authentication within MindTouch

Once you are on the Authentication page then click on the Add Authentication Service tab at the top of the screen. This will then give you the following screen:

From here click the Choose an authentication provider dropdown and select the authentication provider you want to use. In this example we are going to select Microsoft Active Directory as follows:

This will then pre-populate the configuration with the necessary key values that need to be adjusted for your configuration as follows:

1. Description - This is the name of the Authentication Service entry and will be visible to the End Users on the Login page as a radio button
2. The Type needs to stay as Native. This references the actual MindTouch extension itself as opposed to the Authentication Server
3. There are a couple of options for the SID depending on what version of MindTouch you are on.  The prefilled SID should be accurate but if you are switching between MindTouch products then here are the available SIDs
   1. MindTouch Core SID is: sid://mindtouch.com/2007/05/ldap-authentication
   2. Commercial MindTouch SID is:  sid://mindtouch.com/ent/2009/03/ldap-authentication
4. On the login page you will have the option to select how you authenticate to MindTouch. By default it is set to Local, but if you want the external Authentication provider to be the default then you can check this box
5. The searchbase needs to be customized to match your authentication server setup. If our AD domain name is ad.example.com then the searchbase will look like this: DC=ad,DC=example,DC=com
6. The hostname also need to be changed to match your authentication settings. This will be the IP address/hostname of the actual AD server
7. The userquery value samAccountName=$1 shouldn't need to be changed for a majority of installations. Keep this value the way it is and only change if you are advised by a MindTouch Support representative.
8. The bindingdn needs to be changed to match your configuration. In the example of ad.example.com for the AD server the bindingdn value will be $1@ad.example.com

Once you've configured these settings then you can click the Add Authentication Service and the Authentication Service will be added to your MindTouch install and listed on the Authentication list as follows:

Now when your users go to the login page they will be able to select this authentication provider and login with their Active Directory username and password and be logged into MindTouch.