Optional: Enabling Active Directory Integration

It is possible to integrate the authentication with an on-premise active directory service. Users in Aligned Elements need to use the same username as the users registered in AD.

At Aligned Element’s login, the entered password is passed-through to Active Directory for validation. It is also possible to define an Active Directory User-group to define eligible users for the Aligned Elements application.

The relevant web.config settings are:

<!--active directory-->

<add key="useLocalADSignIn" value="true"/>

<add key="localADContextType" value="Domain"/> <!--Machine,Domain,ApplicationDirectory-->

<add key="localADName" value="your.activedirectorydomain.com"/> <!--must use for ApplicationDirectory-->

<!--<add key="localADContainer" value=""/> --><!--must use for ApplicationDirectory-->

<!--<add key="localADUserName" value=""/>-->

<!--<add key="localADPassword" value=""/>--><!--encrypted-->

<add key="localADRequireGroup" value="YourLocalADUserGroup"/>

<!--end active directory-->

Optionally, you may use a dedicated user to access the Active Directory service.

Note: It is recommended to not write any passwords in plain text in the web.config, please use the tool https://demo.aligned.ch:444/encrypt to encrypt your password.