Authenticators

TIBCO MFT Command Center users can be added to the TIBCO MFT Command Center database manually through the Java Command Line Utility and by authenticating to an LDAP server such as active directory. MFT provides easy integration with LDAP servers. you can create, update, and test LDAP authenticators through the Administration > Authenticators option.

Note: To add and manage LDAP authenticators, you must have TIBCO MFT Command Center AdministratorRight in the system.

By default, the user name, full name, email address (optional), telephone number (optional), and department (optional) of the LDAP user are pulled into the TIBCO MFT Command Center database. In addition to controlling user’s details being pulled from the LDAP server, you can optionally set up the TIBCO MFT Command Center right assigned to those LDAP users.

To allow TIBCO MFT Command Center to authenticate and synchronize with an LDAP server, you must configure the following information of the LDAP server:
  • You must know the host information such as the IP and port of the LDAP server that you are authenticating to.
  • You must know the Bind user DN and password.
  • You must have a container such as an OU or group which contains the specific users to be synchronized with the TIBCO MFT Command Center database; for example, OU=MFT Users; the OU contains all users which will be synchronized with MFT (see the following figure).
  • You must know the user base DN and group base DN where the sync group is located.

The following figures show a sample active directory setting: