The <Verification> section must be configured to include information from your Verification Registry.
All of the settings in the Verification section must be populated with the appropriate corresponding values from within your Active Directory service. If any values are missing or configured incorrectly, device registration will fail.
The following table describes the various settings under the VerificationRegistry element:
Setting Name |
Description |
---|---|
ldapURI |
Enter the LDAP URI of the verification registry. The value in the LDAP URI should be entered in the following format: LDAP://domain_controller_hostname/base_dn Note:
The LDAP prefix (e.g., LDAP://) must be capitalized or the connection will fail. |
usernameAttribute |
The user name attribute configured in the LDAP tree, e.g., userName. |
firstnameAttribute |
The user's First Name attribute configured in the LDAP tree, e.g., givenName. |
lastnameAttribute |
The user's Last Name attribute configured in the LDAP tree, e.g., surName. |
emailAttribute |
The user's email attribute configured in the LDAP tree, e.g., emailAddress. |
In the VerificationEmail element, the following settings can be configured:
Setting Name |
Description |
---|---|
useAdminEmailOnly |
To send a verification email to an administrator, set this attribute to true and enter the administrator's email address in the adminEmailAddress attribute. To send a verification email to the user that is requesting device authentication, set this attribute to false. The verification email will be sent to the email address entered by the user during device registration. |
adminEmailAddress |
Enter a value for the administrator's email address If useAdminEmailOnly is set to true. |