Disable LDAP in Clarity and External Authentication

Products

• Clarity PPM On Premise
• Clarity PPM SaaS

Issue/Introduction

How to disable the External Authentication flag in bulk on user properties and also disable LDAP as the company is moving to SSO/SAML

Environment

Release : Any

Resolution

• This External Authentication option makes is only needed if LDAP is enabled and set up. This field will only appear if you enabled LDAP in CSA and enabled Non LDAP Users. So what you can do is:
  
  1. Connect to CSA (save a backup of properties.xml first)
  2. Remove the Use LDAP checkbox in Application. Repeat for each server in cluster, this will disable LDAP
  3. Uncheck Allow non-LDAP users check box in Security tab for each server in cluster.
  4. Restart all services in cluster
• This should remove the field completely from the user properties page and disable LDAP from use.
• Ensure you are able to connect with both old LDAP users and non LDAP users and SSO before moving forward on the next environment.
• Ensure you have an alternate process in adding new users in Clarity & SSO and disable old users.