GLPI LDAP and Active Directory integration
Connecting GLPI to Active Directory: the AD template, group search for nested groups, replicas, bulk user sync from the console and filters that keep Windows default groups out.
GLPI authentication and access control
How users sign in to GLPI and what they can see: LDAP and Active Directory, CAS, x509, web server SSO, profiles, authorization rules and entities.
GLPI with Google Secure LDAP
Using Google Workspace Secure LDAP as GLPI's directory: the LDAP client, access permissions, the client certificate and the Google license it needs.
GLPI CAS authentication
Signing in to GLPI through a CAS server, logout return URLs, and the noAUTO bypass for local administrator accounts.
Windows integrated SSO for GLPI with REMOTE_USER
Passing Kerberos or other web server authentication into GLPI through REMOTE_USER, choosing the header variable, stripping domains from logins and avoiding spoofable proxy headers.
GLPI x509 client certificate authentication
Smart card or client certificate sign-in for GLPI: reading the email attribute from the certificate subject and restricting accepted organizations and common names.
GLPI authorization assignment rules
Giving users the right profile and entity automatically from LDAP, SCIM or SSO attributes, combining multiple rules and handling department changes and leavers.
Designing GLPI profiles and permissions
Building least-privilege GLPI profiles from the seven defaults, recursive assignment to child entities, the life cycle matrix and protecting the Super-Admin profile.
GLPI entities for multi-site organizations and MSPs
When to use entities versus groups and locations, isolating clients or divisions on one instance, delegating administration and the performance cost of deep entity trees.
GLPI password policy and expiration settings
Setting local account password rules in GLPI: length and complexity, expiration and notice periods, reuse prevention and account deactivation for stale users.
GLPI SCIM provisioning with Okta
Provisioning GLPI users and groups from Okta with the SCIM plugin: identity server setup, security methods, password sync and restricting who can reach the SCIM endpoint.
