dmitriydmitriev / ldapcp

This claims provider for SharePoint 2013 and 2016 queries Active Directory and LDAP servers to enhance people picker with a great search experience in federated authentication (typically ADFS).

LDAPCP for SharePoint 2013 and 2016

Please visit ldapcp.com to download LDAPCP and find documentation.

This project was originally hosted on Codeplex but I moved it here since Codeplex is shutting down.

Features

• Easy to configure with administration pages added in Central administration > Security.
• Queries multiple servers in parallel (multi-threaded connections).
• Populates properties (e.g. email, SIP, display name) upon permission creation.
• Supports rehydration for provider-hosted add-ins.
• Supports dynamics tokens "{domain}" and "{fqdn}" to add domain information on permissions to create.
• Implements SharePoint logging infrastructure and logs messages in Area/Product "LDAPCP".
• Ensures thread safety.
• Implements augmentation to add group membership to security tokens.

Customization capabilities

• Customize list of claim types, and their mapping with LDAP objects.
• Enable/disable augmentation globally or per LDAP connection.
• Customize display of permissions.
• Customize LDAP filter per claim type, e.g. to only return users member of a specific security group.
• Set a keyword to bypass LDAP lookup. e.g. input "extuser:[email protected]" directly creates permission "[email protected]" on claim type set for this.
• Set a prefix to add to LDAP results, e.g. add "domain" to groups returned by LDAP.
• Hide disabled users and distribution lists.
• Developers can easily do a lot more by inheriting base class.