topic Re: LDAP-as-a-Service as remote user directory in SASE and Remote Access

LDAP-as-a-Service as remote user directory

Alejandro_Ferna — Wed, 05 May 2021 10:45:39 GMT

Hi, our company has started to use JumpCloud's LDAP-as-a-Service. I would like to use it as ldap backend for remote users but the server field in LDAP Account Unit seems to just allow host entries. The JumpCloud server is an fqdn that resolves dynamic public ip's.

Is there any option to apply this kind of config?

Thank you, regards!

Re: LDAP-as-a-Service as remote user directory

PhoneBoy — Wed, 05 May 2021 19:05:29 GMT

The only LDAP servers we support are Active Directory.
Pretty sure querying an LDAP Server by FQDN instead of IP is an RFE.
We just recently added support for SAML and Remote Access clients, which may be a better fit here.
This was added to the most recent R80.40 JHF.

Re: LDAP-as-a-Service as remote user directory

Alejandro_Ferna — Thu, 06 May 2021 07:40:43 GMT

Thank you for your answer.

I have read about SAML support and it's a good new. "Unfortunately", most of our users that will use the remote access works with linux and, for what I read, the SAML just work with Windows and Mac clients.

Re: LDAP-as-a-Service as remote user directory

PhoneBoy — Thu, 06 May 2021 15:35:05 GMT

If deployed through Mobile Access Blade, it's possible SNX supports SAML authentication, if only because MAB itself supports SAML from R80.40.
StrongSWAN definitely doesn't support SAML authentication as that's a third party client.