Required Privileges

To perform LDAP synchronization, the user ID specified in Connection details on the LDAP tab should have Search permission on the LDAP Server. The specified user ID should also have the following permissions in OneSpan Authentication Server:

• Administration Logon

• View Domain

• View Organizational Unit

• View User

• Create User (if Create users option is selected)

• Delete User (if Delete users option is selected)

• Update User (if Update users is selected)

• Enable User (if Enable created users is selected)

• Create Organizational unit (if Create missing organizational units is selected)

• Link User and Unlink User (if there are LDAP attributes mapped to Linked user and Linked user domain OneSpan Authentication Server user attributes)

If there is an LDAP attribute mapped to Assigned Digipass OneSpan Authentication Server user attribute, then the following OneSpan Authentication Server permissions are also required:

• Assign Digipass

• View Digipass

• Update Digipass