feature requests

[MHALL1]

I’m keen to get some traction behind this and have been toying in my head with what AD integration may look like.

My view would be that maybe as an admin setting, US can be set to primarily use AD authentication (unless your login screen has a US login / AD login different tabbed forms) where if successful and common item (username/email) matches an existing user record, log them in and then follow US group permissions/session as normal. If authentication successful but no unique user item is matched (so no user exists in US but does in AD), create one/register with a basic login permission to account pages etc but nothing more until that account is then added to required groups by a US admin – giving benefit of AD for auth and US for page permissions.

Not sure how practical this is or where to start technically. Would be interested to hear how others might approach this.

[MHALL1]

Just came across an LDAP test server we could use: https://www.forumsys.com/tutorials/integ...st-server/

The more I think about the above, all it would need to do is log the user in rather than creating an account. I've been working through the code this morning trying to figure out where upon successful LDAP auth I can make that equal / create a session for an existing US user.

Help

[Brandin]

Thanks for this Matt-I hope to look into it further soon.

[MHALL1]

Thanks Brandin, I look forward to it

[MHALL1]

Reading the change log for 4.3.21 looks really positive, especially when I see words like session .
My understanding of how users sessions work for US is limited but if there is anything I can do to help here please let me know.

[Brandin]

Thanks Matt, glad to hear you're excited for the new version!