FAQ

  1. What is LDAP?
  2. What applications can be integrated with LDAP for authentication and/or authorization?
  3. What are the requirements for applications requesting LDAP integration?
  4. How do I access an application that is integrated with LDAP?
  5. Who is able to access data in the LDAP directory?
  6. Where can I find technical details for integrating with LDAP?

 

  1. What is LDAP?
    The LDAP directory service (will be referred to simply as LDAP from now on) at UBC is used as an "application" level directory. It is designed to support various applications deployed on campus. The current implementation of LDAP is based on the OpenLDAP platform. LDAP provides authentication services using Campus Wide Login (CWL) account data and identity attributes from the CWL and UBC Directory source databases. Fast response times and high availability are achieved by the use of load balancers in front of the LDAP servers. Multiple redundant replicas of the directory are maintained to ensure data and service redundancy in the event of failures as well as to provide high performance.
  2. What applications can be integrated with LDAP for authentication and/or authorization?
    Many standard applications can use LDAP for authentication and/or authorization purposes. For example, UBC Wireless, VPN, and some desktop clients are using the LDAP service. Consult your application vendor's documentation to see if it is compatible with the LDAP protocol.
  3. What are the requirements for applications requesting LDAP integration?
    UBC IT security policies require that applications integrating with LDAP must be hosted on UBC servers and maintained by UBC staff. For more details on integration requirements and suitability, please consult the Pre-Integration Checklist.
  4. How do I access an application that is integrated with LDAP?
    This is dependent on how the application integrates with LDAP. In general, UBC users will be able to access LDAP integrated applications with their CWL account if the integrated applications make use of LDAP authentication functionality. If only non-authentication related LDAP functionality is used, access is dependent on the integrating application's implementation.
  5. Who is able to access data in the LDAP directory?
    Data access in LDAP is governed by various access control policies. CWL related data is considered privileged and requires a LDAP service account to access. UBC Directory related data is publically available via anonymous binding from within the UBC network.
  6. Where can I find technical details for integrating with LDAP?
    Integration partners may review the LDAP Service Integration Guidelines for additional information on using this service. For security reasons, please submit a request for technical documentation on LDAP to the Identity and Access Management Team.