Is it possible to control access by LDAP?

SonarQube Server / Community Build
1

Hello,

I’m wondering if i can discriminate users based on their LDAP group membership. I realice that everyone who has a valid user can access to SonarQube instance but i would like to allow the entrance only for determinate groups.

Is it possible?

Thanks.

2

Hello @jserrahima,

Yes this is possible.
You would have to:

  • Configure LDAP group synchronization (so that when user authenticates, its group memberships are also fetch from the LDAP). See Group mapping section on the page below
  • Create on SonarQube groups with the same names as the LDAP groups you want to sync
  • Assign permissions based on these groups

See Delegating Authentication | SonarQube Docs

Olivier

3

Hi @OlivierK,

Thanks for the reply. I was finally able to filter by group membership like this:

ldap.user.request=(&(objectClass=user)(sAMAccountName={login})(memberOf=CN=name_of_group_you_are_looking_for,CN=Users,DC=organization,DC=com))