Introduction to administering embedded LDAP for the Teamcenter management console

Lightweight directory access protocol (LDAP) is a protocol that facilitates user authentication and authorization. You must use LDAP to provide authorization for user access to the Teamcenter management console. When you install the Teamcenter management console, the Use Embedded LDAP option is selected by default on the Management Console LDAP Configurations panel in Teamcenter Environment Manager (TEM). You can use this embedded LDAP to manage user authentication instead of having to use your own external LDAP system. To administer the embedded LDAP, you can use Apache Directory Studio provided in the Teamcenter installation source at additional_applications\ApacheDirectoryStudio. Apache Directory Studio is an optional tool. After you install and configure Apache Directory Studio, you can define users and passwords used by the embedded LDAP to permit access to the Teamcenter management console. The embedded LDAP only has one user account created by default (admin) to access the Teamcenter management console. The Teamcenter administrator can add additional users to access the console (for example, user1, user2, and so on). In addition, you can also set password policies such as the minimum password length, password reset at first-time logon, password aging, the requirement of special characters on passwords, blacklist passwords, and so on.