Configure LDAP on Pathfinder | Pathfinder

Overview

Pathfinder authenticates users through a connected BeyondTrust product instead of connecting directly to Active Directory or LDAP. The connected product — Privileged Remote Access or Remote Support — acts as the proxy site for directory authentication.

Prerequisites

Before you begin, make sure you have:

• Administrator access to Pathfinder.
• A connected BeyondTrust product configured with an LDAP or Active Directory provider.
• The directory domain and any required connection details.

🚧

Important information

This procedure assumes you have already configured an LDAP or Active Directory provider in your BeyondTrust product. If you have not, complete the appropriate configuration procedure before continuing.

• Privileged Remote Access
• Remote Support

Although Password Safe appears as a product option, it is not currently available for use with directory authentication in Pathfinder.

Register the directory provider

1. Log in to Pathfinder as an administrator.
2. From the tenant dropdown, select Administration.
3. Open the navigation menu and click Directory Authentication.

4. On the Directory Authentication page, you can add a new directory provider or edit an existing one.

5. When adding a provider, configure:

   • Label
   • Provider type
   • Domain or server
   • Proxy site
   • Product

⚠️

Warning

Removing a provider prevents users who rely on that directory from signing in unless another authentication method is available.

Provision users

To add an LDAP user manually:

1. From the navigation menu, go to User Management.

2. Click Invite User.

3. In the User Details section, enter an Email Address, First Name, and Last Name. All fields are required.
4. In the User Permissions section, for Organization Role, select either Standard User or Administrator.
5. For Site Access, select the sites and at least one application to grant user access to.

6. Click Invite User.
   The user receives an email with a link to create a new password, then access the selected site(s) and application(s).

Sign in

Users sign in using the tenant-specific URL. For example, https://login.beyondtrust.io/signin/signIn?orgId=your-org-id

Replace your-org-id with your organization's tenant ID.