Configuring Contribute Publishing Server (CPS only)
57
•
Windows domain uses your organization’s Microsoft Windows authentication solution.
If you use this method, the User IDs in your LDAP directory must match your Windows
user IDs.
Authentication workflow
When a user attempts to connect to a CPS-managed website through Contribute, the process
through which CPS communicates with your organization’s LDAP or other user directory service
is as follows:
1.
Contribute prompts the user for their user directory authentication credentials.
2.
Contribute generates a Simple Object Access Protocol (SOAP) user authentication message,
and sends the request to CPS over an SSL-encrypted network connection.
Note:
When sending SOAP requests to CPS, Contribute sends the request over an SSL
encrypted network connection, and uses port 8900 by default. The message timeout is
20 seconds.
3.
CPS requests authentication from the LDAP server by using the credentials specified in the
SOAP user authentication message.
Note:
When sending requests to the user directory server, CPS sends the request over an LDAP
or LDAPS network connection, and uses ports 389 and 636 by default. The message timeout is
60 seconds.
4.
The LDAP server attempts to validate the credentials and sends the resulting confirmation or
rejection to CPS.
5.
If the authentication was successful, CPS sends a connection key to the Contribute client for
each website that the user has access to.
6.
For each connection that CPS does not return, Contribute prompts the user for FTP
authentication for the corresponding website.
