We have a large Transaction Processing System (batch processing) ERP Solution for large Healthcare claims processing organizations and businesses. We currently implement our own user account management. i.e., a user with the appropriate rights/roles can create, edit, or delete accounts and assign rights and roles based on needs.
Each user logs in with assigned account, and access to features are assigned based on rights and roles.
We have been asked by a client if we support LDAP or Active Directory, were the users accounts are managed on a virtual domain controller, and once logged in, the user then has no need to log into additional software....for example, ours.
I have been reviewing the LDAP Protocol, and Active Directory Service Interfaces.
Just curious to know if anyone has experience with this, and what is the best method of approaching this transition of supporting these? I am particularly concerned with whether or not we have to stop using our current account management and login system?
We are currently developing using Delphi 2010 and UNIDAC (for database connections).
Thanks
To authenticate user on AD you can try using adshlp library from:
http://www.agnisoft.com/white_papers/active_directory.asp
There are ways to automate the login with this library.