ManageEngine ServiceDesk Plus 8.0 :: Admin Guide

Configuring Active Directory Authentication
ManageEngine ServiceDesk Plus 8.0 :: Admin Guide
You can configure to authenticate the requester login with the active directory (AD). On configuring
AD authentication, if there are any changes made in the password made in AD, the same is reflected
in ServiceDesk Plus. So the requesters can login using the login name and password of the system.
Note: Please ensure that before you start configuring the AD Authentication, you have
already imported the requesters. Only if a user account is available in ServiceDesk Plus
application, it will authenticate the password for that user account from the active directory.
Hence, when none of the users have been imported from the active directory, the
authentication cannot be done for the user account.
To configure the Active Directory Authentication
1. Log in to the ServiceDesk Plus application using the user name and password of a
ServiceDesk Plus administrator.
2. Click the Admin tab in the header pane.
3. In the Users block, click the Active Directory Authentication icon . Here you can
enable or disable active directory authentication. By default the AD authentication will be
disabled.
4. If you have already imported requesters from the any of the domains in your network, then
click Enable button.
Even after enabling Active Directory (AD) Authentication, if you would like to bypass the AD
Authentication, then in the application login screen, you need to select Local Authentication from the
Domain list box after entering the login name and password, and then click Login button to enter
ServiceDesk Plus.
Configure Pass - through Authentication
On enabling single sign-on, ServiceDesk plus directly authenticates your windows system user name
and password. Hence you need not login over again to enter into ServiceDesk plus or remember too
many passwords.
ServiceDesk Plus Pass through Authentication uses NTMLV2 which provides better security and
validates the credentials using NETLOGON service.
1. Enabling Active Directory, activates the Pass-through authentication (Single Sign-on) option.
2. If you like to activate single sign - on, select the Enable Pass-through Authentication
(Single Sign-On) option.
3. You can enable Pass-through authentication for users from a particular domain. To do so,
select the Domain Name from the drop down list. Enabled domain should be two way
trusted.
4. Specify the DNS Server IP of the domain in the provided field.
5. To use the NTLM security provider as an authentication service a computer account needs to
be created in the Active Directory with a specific password. Specify a unique name for the
Computer Account and Password for this account.
6. The Bind String parameter must be a fully qualified DNS domain name or the fully qualified
DNS hostname of a particular AD server.
7. Save the authentication. You will get a confirmation message on the authentication.
Upon saving the details, a new computer account will be created on the Active Directory (with the help
of VB Script). If the user specifies existing computer accountname, the password specified here will
be reset on the Active Directory for the computer account. User can choose to reset the password of
computer account by clicking on the Reset Password link as well.
ZOHO Corp. 410