You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
1.3 KiB
1.3 KiB
Authentication Flow — Zammad + LDAP
Terakhir Diperbarui: 2026-07-02
Alur login (target)
sequenceDiagram
participant U as User
participant Z as Zammad UI
participant AD as AD 10.100.1.40
U->>Z: Login (username + password)
Z->>AD: LDAP bind + search user
AD-->>Z: OK + attributes (mail, cn, groups)
Z->>Z: Map group → Zammad role/group
Z-->>U: Session / JWT (Zammad internal)
Integrasi FE (mysupperapps_FE_PWA)
sequenceDiagram
participant FE as my.gisportal.id
participant GC as geonet-console
participant Z as Zammad API
U->>FE: Buka /ticketing
FE->>GC: Login LDAP (existing flow)
FE->>Z: API calls dengan token layanan
Note over FE,Z: Token dari Zammad admin — bukan password user ke API
Detail implementasi FE:
mysupperapps_FE_PWA/docs/(belum dibuat).
LDAP parameters (referensi)
| Parameter | Nilai |
|---|---|
| Host | 10.100.1.40 |
| Port | 389 |
| Base DN | DC=gisportal,DC=id |
| User filter | Sesuaikan atribut AD (sAMAccountName) |
Sinkronisasi group: petakan AD group ke Zammad Group untuk routing tiket.
Referensi
- ADR LDAP umum:
server-connection/docs/adr/ADR-0003-ldap-authentication.md