Search code examples
pingfederate

How search filter in pingfederate PCV works

I am struggling to understand pingfederate LDAP Password credential validator's search filter.

If my sso is going to have HTML form adapter and user enters username/password how this search filter authenticates exactly?

Is PCV pulling the record or transferring the credentials entered by user to LDAP datastore for authentication?

Solution

  • If you're using a filter like:

    sAMAccountName=${username}

    then all that does is tell PingFederate how to search for the user. It then does an authenticated bind as that filtered user to the LDAP data store, retrieving any additional attributes as needed according to the adapter contract.