What it's about
How to set up
To activate the login with Active Directory on XCALLY, you need to:
A. Join XCALLY server to the Active Directory domain
B. Enable Active Directory connection in XCALLY
C. Enable Active Directory login for Administrator, Users and Agents
Join XCALLY server to the Active Directory domain
As requirement of the integration, the XCALLY server must be added in the Active Directory domain.
Follow these steps to configure the XCALLY server:
Use SSH to connect to your XCALLY server
Login with root user
Install required packages for joining to Active Directory (AD) domain
apt -y install realmd libnss-sss libpam-sss sssd sssd-tools adcli samba-common-bin oddjob oddjob-mkhomedir packagekit
After a successful installation can you proceed to discover Active Directory: the realm discover command returns complete domain configuration and a list of packages that must be installed for the system to be enrolled in the domain
realm discover <domain name>
An Active Directory administrative user account is required for integrating your XCALLY machine with Windows Active Directory domain. Check and confirm Active Directory admin account and the password
realm join -U <user> domain.name
Enable Active Directory connection in XCALLY
To use Active Directory login, you need to add Active Directory settings on XCALLY.
Retrieve Active Directory configuration
Ask to Active Directory Administrator the following properties:
Property | Description |
---|---|
url | Active Directory server to connect to, e.g. ldap://ad.example.com |
baseDN | The root DN from which all searches will be performed, e.g. dc=example,dc=com. |
domain | Domain of email address, e.g. example.com |
Configure Active Directory in XCALLY
Follow these steps to configure the Active Directory:
Use SSH to connect to your XCALLY server
Login with motion user
su - motion
Open /var/opt/motion2/.env and edit the following properties (add it if not existing)
XC_ACTIVEDIRECTORY_BASE_DN='<baseDN>' XC_ACTIVEDIRECTORY_URL='<url>' XC_ACTIVEDIRECTORY_DOMAIN='<domain>'
Stop motion application (with root privileges)
service motion stop
Initialize environment variables
cd /var/opt/motion2 npm run initialize
Enable Active Directory login for Administrator, Users and Agents
The login with Active Directory must be enabled in XCALLY
Enable login in General Settings
The Login with SAML must be enabled under Settings → General:
Users and Agents will be able to connect to XCALLY using SAML provider credentials.
Staff emails on XCALLY must be equal to the Staff emails registered on SAML provider.