Genesys Engage on-premises

 View Only
Discussion Thread View
  • 1.  Exclude agents from LDAP autentifications

    Posted 03-24-2022 09:33
    Hi to all,

    We are preparing to implement LDAP autentification. At first step there is plan to allow autentification against LDAP just for selected agents.
    But all agents have already "External ID" set and one is use for other purposes as just for LDAP (DWH is using one somehow in reports).
    Question is:
    How can I configure system to autentificate just selected agents against LDAP ?
    One approach is to use config proxy, but agents use WFM web and there is no opportunity to select config server where to login to. As e.g. in WDE.
    So configuration of LDAP should be set on main config server, but there is requirements/limitation as one above. To allow autentificate just selected agents against LDAP .

    Example:

    Agent1:
    External ID = 1233
    Autentificate against LDAP:Yes (Autentificate Domain Name and password)

    Agent2:
    Exterenal ID = 1234
    Autentificate against LDAP:No (autentificate internally by genesys UserName and password)

    Agent3:
    External ID = 1235
    Autentificate against LDAP:Yes (Autentificate Domain Name and password)



    Can you advise how can we achieve this "goal"?

    Thank you for help

    Best regards

    Pavel
    #PlatformAdministration
    #Security
    #SystemAdministration

    ------------------------------
    Pavel Broska
    Alcasys Slovakia a.s
    ------------------------------


  • 2.  RE: Exclude agents from LDAP autentifications

    Posted 03-25-2022 03:00
    you can configure gauth_ldap also in the annex tab for the person.
    why you don't leave the external authentication empty if you don't want ldap authentication?

    ------------------------------
    Nehat Gezduci
    DDM Consulting Deutschland GmbH
    ------------------------------



  • 3.  RE: Exclude agents from LDAP autentifications

    Posted 03-25-2022 04:57
    I've assigned the settings to the Person's annex tab in the past, when those persons were on a different LDAP server that others.  That said, a better approach would have been for the different groups to use different Proxies, as managing the annex tab gets complicated.  Especially if Agents are managed by some WFM team, etc.

    As such, I agree that the best approach would be to remove the External ID value.  Which is basically the ON/OFF switch you're looking for.

    I haven't tried this, but you could possibly use bulk export/import to remove the External IDs.

    ------------------------------
    Tony Morrow
    ------------------------------



  • 4.  RE: Exclude agents from LDAP autentifications

    Posted 03-25-2022 05:22
    bulk operations using agent management in GAX can easily do the job if you want to update a selected list of agents.
    within persons you can easily export selected administrator, update the csv and import with the modifications.

    ------------------------------
    Nehat Gezduci
    DDM Consulting Deutschland GmbH
    ------------------------------



  • 5.  RE: Exclude agents from LDAP autentifications

    GENESYS
    Posted 03-25-2022 05:28
    Hello Pavel,

    Set library=internal in the person's annex so that person will be internally authenticated. A more detailed explanation of different options at different levels can be found in the article below.

    000085685 - How to force internal authentication for Config Server clients?
    https://genesyspartner.force.com/customercare/kA91T000000Xb6t?name=000078205


    ------------------------------
    Vinod Balan
    Genesys - Employees
    ------------------------------