# Integration with LDAP **URL:** \ **Category:** Flowable Engine\ **Created:** [February 3, 2017, 7:42pm UTC](https://forum.flowable.org/t/integration-with-ldap/253 "2017-02-03T19:42:17Z")\ **Posts on this page:** 20\ **Page:** 2
**Author:** ![jpotts](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.flowable.org/jpotts/32/32_2.png) [@jpotts](https://forum.flowable.org/u/jpotts)\ **Post date:** [March 3, 2017, 10:35pm UTC](https://forum.flowable.org/t/integration-with-ldap/253/21 "2017-03-03T22:35:33Z")
There is no such thing as a Share Connector for Flowable yet. If you want to integrate Alfresco CE with Flowable, you’ll have to write the various integration points. I’ve done some work on this lately. I will update my [post](http://forum.flowable.org/t/addressing-gaps-as-compared-to-alfresco-activiti/324/3) on the subject. ---
**Author:** ![Zholaman](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.flowable.org/zholaman/32/137_2.png) [@Zholaman](https://forum.flowable.org/u/Zholaman)\ **Post date:** [March 4, 2017, 6:16am UTC](https://forum.flowable.org/t/integration-with-ldap/253/22 "2017-03-04T06:16:01Z")
Hi Jeff, facilitating such a professional as you will greatly help Flowable community in this issue! Also thanks for your great [Blog](http://ecmarchitect.com/). Thank you! ---
**Author:** ![tijs](https://avatars.discourse-cdn.com/v4/letter/t/bc79bd/32.png) [@tijs](https://forum.flowable.org/u/tijs)\ **Post date:** [March 4, 2017, 8:38am UTC](https://forum.flowable.org/t/integration-with-ldap/253/23 "2017-03-04T08:38:23Z")
Hi Jeff, Yes indeed, there was a bit more involved. In the updated user guide you can find a description on how to setup LDAP for the UI apps (see [https://github.com/flowable/flowable-engine/blob/master/userguide/src/en/ch13-UI.adoc](https://github.com/flowable/flowable-engine/blob/master/userguide/src/en/ch13-UI.adoc) in the Flowable IDM application section). Best regards, Tijs ---
**Author:** ![jpotts](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.flowable.org/jpotts/32/32_2.png) [@jpotts](https://forum.flowable.org/u/jpotts)\ **Post date:** [March 6, 2017, 8:47pm UTC](https://forum.flowable.org/t/integration-with-ldap/253/24 "2017-03-06T20:47:51Z")
I’ve checked out from head and done a build (BTW, I must be missing something because mvn install -Dcheck does not build every UI app and their depedencies). Once the build was complete and I placed my props file in $TOMCAT\_HOME/lib I successfully authenticated against my local Apache Directory Suite server. However, I can only auth against idm. It is as if the privileges are not coming back correctly. I made sure to place one of my LDAP users in admin.email. I had to use their uid for this, not their actual email address. Out of my five test users in LDAP, only this user can authenticate. ---
**Author:** ![jpotts](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.flowable.org/jpotts/32/32_2.png) [@jpotts](https://forum.flowable.org/u/jpotts)\ **Post date:** [March 6, 2017, 9:57pm UTC](https://forum.flowable.org/t/integration-with-ldap/253/25 "2017-03-06T21:57:09Z")
I realized that the reason my other test users could not authenticate was that I had to manually add them to each of the four privilege lists. Once I did that they can authenticate against the IDM app. However, the problem still stands that none of my users can authenticate against anything other than IDM. Also, I noticed email wasn’t coming back so I added that. [Here’s the PR](https://github.com/flowable/flowable-engine/pull/290). ---
**Author:** ![Zholaman](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.flowable.org/zholaman/32/137_2.png) [@Zholaman](https://forum.flowable.org/u/Zholaman)\ **Post date:** [March 7, 2017, 7:20am UTC](https://forum.flowable.org/t/integration-with-ldap/253/26 "2017-03-07T07:20:00Z")
Hi Tijs, I have checked the instruction concerning ‘LDAP integration’ but for me it is not working. To check the instructions showed in the [User Manual](https://github.com/flowable/flowable-engine/blob/master/userguide/src/en/ch13-UI.adoc) I used ‘ **Apache Directory Studio which include ApacheDS** ’. I have created new user - ‘ **zholaman** ’ and add the following options to the file: /opt/tomcat/webapps/flowable-idm/WEB-INF/classes/META-INF/flowable-ui-app/ **flowable-ui-app.properties** After above steps I have tried to authenticate on **flowable-idm** but no success (Invalid credentials). My LDAP options almost the same as showed in the [User Guide](https://github.com/flowable/flowable-engine/blob/master/userguide/src/en/ch13-UI.adoc): > ``` > ldap.enabled=true > ldap.server=ldap://192.168.0.14 > ldap.port=10389 > ldap.user=uid=admin, ou=system > ldap.password=secret > ldap.basedn=o=system > ldap.query.userbyid=(&(objectClass=inetOrgPerson)(uid={0})) > ldap.query.userbyname=(&(objectClass=inetOrgPerson)(|({0}=*{1}*)({2}=*{3}*))) > ldap.query.userall=(objectClass=user) > ldap.query.groupsforuser=(&(objectClass=groupOfUniqueNames)(uniqueMember={0})) > ldap.query.groupall=(objectClass=groupOfUniqueNames) > ldap.attribute.userid=uid > ldap.attribute.firstname=cn > ldap.attribute.lastname=sn > ldap.attribute.groupid=cn > ldap.attribute.groupname=cn > ldap.cache.groupsize=10000 > ldap.cache.groupexpiration=180000 > > ``` In according above let me ask where and what log file I should to check to find information about LDAP authentication/synchronizations and LDAP fails ? And may be you have some ideas about what I am doing or did wrong. Thank you! ---
**Author:** ![tijs](https://avatars.discourse-cdn.com/v4/letter/t/bc79bd/32.png) [@tijs](https://forum.flowable.org/u/tijs)\ **Post date:** [March 7, 2017, 7:35am UTC](https://forum.flowable.org/t/integration-with-ldap/253/27 "2017-03-07T07:35:14Z")
@jpotts What’s the result you get when authenticating against the Flowable Modeler for example, with one of the other four users? Bad credentials? I think I tried the same scenario and that worked fine for me, but I’ll do another validation to be sure. @Zholaman make sure the zholaman user has the 4 privileges. When logging in with the admin user to the Flowable IDM application, you can add the privileges to the users found in LDAP. Best regards, Tijs ---
**Author:** ![Zholaman](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.flowable.org/zholaman/32/137_2.png) [@Zholaman](https://forum.flowable.org/u/Zholaman)\ **Post date:** [March 7, 2017, 9:45am UTC](https://forum.flowable.org/t/integration-with-ldap/253/28 "2017-03-07T09:45:08Z")
Dear Tijs, I tried to provide to the ‘ **zholaman** ’ user some privileges but flowable-idm didn’t found him in the list of users on the User tab in flowable-idm. Left side column of User tab in flowable-idm is empty. If I understand correctly after LDAP synchronizing the flowable-idm should contains a list of LDAP users is not it ? JYI I have used LDAP DB provided by ApacheDS as example. Version of Apache Directory Studio is: 2.0.0.v20161101-M12 ([http://directory.apache.org/studio/download/download-windows.html](http://directory.apache.org/studio/download/download-windows.html)) Best regards, Zholaman ---
**Author:** ![tijs](https://avatars.discourse-cdn.com/v4/letter/t/bc79bd/32.png) [@tijs](https://forum.flowable.org/u/tijs)\ **Post date:** [March 7, 2017, 7:06pm UTC](https://forum.flowable.org/t/integration-with-ldap/253/29 "2017-03-07T19:06:59Z")
Hi Zholaman, You are using the flowable-idm application from Github master right? The ldap.query.userall=(objectClass=inetOrgPerson) property defines the query that is performed on LDAP to retrieve the users. I used the latest stable version of the Apache Directory Studio to test with (1.5.x). Best regards, Tijs ---
**Author:** ![Zholaman](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.flowable.org/zholaman/32/137_2.png) [@Zholaman](https://forum.flowable.org/u/Zholaman)\ **Post date:** [March 8, 2017, 5:57am UTC](https://forum.flowable.org/t/integration-with-ldap/253/30 "2017-03-08T05:57:13Z")
Dear Tijs, I am using the ‘Flowable’ which I got by the link: [http://www.flowable.org/downloads.html](http://www.flowable.org/downloads.html) So let me ask is there some difference between above link and current master reporsitory ? Best regards Zholaman ---
**Author:** ![tijs](https://avatars.discourse-cdn.com/v4/letter/t/bc79bd/32.png) [@tijs](https://forum.flowable.org/u/tijs)\ **Post date:** [March 8, 2017, 6:49am UTC](https://forum.flowable.org/t/integration-with-ldap/253/31 "2017-03-08T06:49:37Z")
Hi Zholaman, Yes, we’ve made some changes to the UI apps and the LDAP logic. The link to the update userguide is therefore also the Github master version and not the userguide on the website. If you run Ant from the distro folder on the Github master version, a full Flowable distribution is build and all the UI app WARs are created for you. We’ll also release a 6.0.1 version within the next few weeks including the LDAP fixes. Best regards, Tijs ---
**Author:** ![Zholaman](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.flowable.org/zholaman/32/137_2.png) [@Zholaman](https://forum.flowable.org/u/Zholaman)\ **Post date:** [March 9, 2017, 6:12am UTC](https://forum.flowable.org/t/integration-with-ldap/253/32 "2017-03-09T06:12:22Z")
> [@tijs](#): > > If you run Ant from the distro folder on the Github master version, Hi Tijs, could you give me an advice please! I did not use ‘Ant’ before but this is not a problem (I can get info how to work with Ant from the Internet). I just do not know what the IDE package from the below list will be appropriate to compile/build ‘Flowable’ from the [source code](https://github.com/flowable/flowable-engine) ? The [list](https://eclipse.org/downloads/eclipse-packages/) of different packages of Eclipse Neon IDE . The [list](https://netbeans.org/downloads/) of different packages of NetBeans IDE 8.2. Best regards, Zholaman ---
**Author:** ![tijs](https://avatars.discourse-cdn.com/v4/letter/t/bc79bd/32.png) [@tijs](https://forum.flowable.org/u/tijs)\ **Post date:** [March 9, 2017, 7:50am UTC](https://forum.flowable.org/t/integration-with-ldap/253/33 "2017-03-09T07:50:13Z")
Hi, If you are not familiar with Apache Ant, then it’s probably best to wait for the 6.0.1 release. Or read more about Ant on [http://ant.apache.org](http://ant.apache.org) Best regards, Tijs ---
**Author:** ![Zholaman](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.flowable.org/zholaman/32/137_2.png) [@Zholaman](https://forum.flowable.org/u/Zholaman)\ **Post date:** [March 9, 2017, 9:34am UTC](https://forum.flowable.org/t/integration-with-ldap/253/34 "2017-03-09T09:34:10Z")
Dear Tijs, Eclipse comes pre bundled with the Ant plugin, ready to use. I have downloaded the [source code](https://github.com/flowable/flowable-engine) as zip file and extracted it to the local folder. So let me ask what I need to do next ? I am sorry for my silly questions but I have no information about structure of ‘Flowable’ project source code. I have found Ant project file - build.xml in flowable-engine-master\distro\build.xml but it does not contains javac task. P.S. I have been working with simple Java projects. But I have never working with big projects like ‘Flowable’. If ‘Flowable’ building takes lot of steps and you have not a time to explain how to do that, I will be wait the next versions (6.0.1) of Flowable. Thanks! Best regards, Zholaman ---
**Author:** ![tijs](https://avatars.discourse-cdn.com/v4/letter/t/bc79bd/32.png) [@tijs](https://forum.flowable.org/u/tijs)\ **Post date:** [March 10, 2017, 3:47pm UTC](https://forum.flowable.org/t/integration-with-ldap/253/35 "2017-03-10T15:47:31Z")
Hi Jeff, We did some testing and the likely cause why it isn’t working for you are the following properties: idm.app.url=http://localhost:8080/flowable-idm idm.admin.user=admin idm.admin.password=test The other UI apps will do a REST call to the IDM app to fetch user info. Here you have to configure a valid user (from LDAP). If the user is not valid, the user info fetching fails and you can’t login to the UI app. Best regards, Tijs ---
**Author:** ![Sebastiaan](https://avatars.discourse-cdn.com/v4/letter/s/48db29/32.png) [@Sebastiaan](https://forum.flowable.org/u/Sebastiaan)\ **Post date:** [March 30, 2017, 6:36am UTC](https://forum.flowable.org/t/integration-with-ldap/253/36 "2017-03-30T06:36:20Z")
Is there a timing on when 6.0.1 will be released? ---
**Author:** ![tijs](https://avatars.discourse-cdn.com/v4/letter/t/bc79bd/32.png) [@tijs](https://forum.flowable.org/u/tijs)\ **Post date:** [March 30, 2017, 9:03am UTC](https://forum.flowable.org/t/integration-with-ldap/253/37 "2017-03-30T09:03:22Z")
We are aiming to release a new version (6.0.1) next week or the week after. Best regards, Tijs ---
**Author:** ![Zholaman](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.flowable.org/zholaman/32/137_2.png) [@Zholaman](https://forum.flowable.org/u/Zholaman)\ **Post date:** [March 30, 2017, 12:18pm UTC](https://forum.flowable.org/t/integration-with-ldap/253/38 "2017-03-30T12:18:17Z")
Dear Tijs, Let me ask was there tested the new version of Flowable with MS AD ? ---
**Author:** ![tijs](https://avatars.discourse-cdn.com/v4/letter/t/bc79bd/32.png) [@tijs](https://forum.flowable.org/u/tijs)\ **Post date:** [March 30, 2017, 12:35pm UTC](https://forum.flowable.org/t/integration-with-ldap/253/39 "2017-03-30T12:35:39Z")
Hi, No, a couple of people mentioned they would do some testing with MS AD, but don’t think there has been feedback on the forum about this. Best regards, Tijs ---
**Author:** ![Zholaman](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.flowable.org/zholaman/32/137_2.png) [@Zholaman](https://forum.flowable.org/u/Zholaman)\ **Post date:** [March 30, 2017, 12:46pm UTC](https://forum.flowable.org/t/integration-with-ldap/253/40 "2017-03-30T12:46:32Z")
Dear Tijs, One of this couple people I was. So let me ask you advice/help me what I need to build the Flowable from the source ? I am ready to help but can’t due lack of expirience. So as I told early I know how to build a small Java projects. Give me a chance to help to the Flowable project with testing MS AD integration possibility. Best regards, Zholaman [Previous page](https://forum.flowable.org/t/integration-with-ldap/253.md?page=1) [Next page](https://forum.flowable.org/t/integration-with-ldap/253.md?page=3)