LDAP Document Management Integration

LDAP document management integration connects your directory server directly to your document management system. User accounts, group memberships, and access permissions stay synchronized without manual intervention. infoRouter integrates with LDAP and Active Directory to provide single sign-on, automatic user provisioning, and centralized access control. When a user is added, modified, or disabled in your directory, infoRouter reflects the change automatically.

The Problem: Managing Users in Two Places

Every time your IT team adds a new employee, they create an Active Directory account and then separately create an infoRouter account, assign Library memberships, and configure permissions. When someone leaves, IT disables their AD account and hopes someone remembers to revoke their document management access too.

Duplicate user management is not just tedious. It is a security gap. Orphaned accounts, stale permissions, and inconsistent group memberships create exactly the kind of exposure that auditors flag and attackers exploit.

How infoRouter LDAP Integration Works

Automatic User Synchronization

infoRouter's built-in LDAP synchronization tool connects to one or more LDAP directory servers, including Active Directory, and pulls user accounts and group memberships directly into infoRouter. You select which LDAP groups to synchronize, and infoRouter handles the rest:

• New users in the directory are automatically created in infoRouter
• Disabled or deleted users are automatically locked out
• Modified attributes such as email address, login ID, and organizational unit are updated in infoRouter without manual intervention
• Multi-domain support. Synchronize users from multiple domains into a single infoRouter installation.

LDAP becomes the single source of truth for user credentials. Authentication is always handled by the directory server.

Single Sign-On (SSO)

With LDAP or Windows Authentication enabled, users access infoRouter using the same credentials they use for their workstation, email, and other enterprise applications. No separate login. No additional password to manage. The authentication handshake happens transparently.

For organizations using Windows Authentication, infoRouter also supports smart card readers and biometric factors as additional authentication layers.

Centralized Access Control

Because group memberships are synchronized from LDAP, access control in infoRouter follows the same structure your IT team already manages. Add a user to the "Engineering" group in Active Directory, and they automatically gain access to the Engineering Library in infoRouter. Remove them from the group, and access is revoked.

This means your IT team manages permissions in one place: the directory. Both network resources and document management permissions stay consistent.

Preserved Memberships During Sync

During synchronization, infoRouter preserves existing Library memberships and user-assigned permissions. LDAP sync updates credentials and attributes without overwriting document-level access settings that Library Managers have configured independently.

What IT Evaluators Need to Know

• Multi-domain: Yes. Synchronize from multiple directory domains.
• Preserved memberships: Existing Library memberships and permissions are preserved during sync.

See It in Action

Schedule a demo to see LDAP synchronization, SSO, and centralized access control working with your Active Directory environment.

Schedule a Demo