To connect a remote user domain

1. On the Flex Appliance Console, click the Access management icon in the left-side navigation bar to open the Access management page.
   
2. Click Connect remote user domain.
3. Fill in the required parameters and select the connection type. If you do not enter a Port value, the following default ports are used:

   • LDAP (Plain text or Plain text + TLS encrypted)

     • Standard LDAP: Port 389

     • Global Catalog (GC): Port 3268

   • LDAPS (SSL encrypted)

     • Standard LDAPS: Port 636

     • Global Catalog over SSL (GC SSL): Port 3269

   To let users from any domain in a multi-domain AD forest sign in, connect to the Global Catalog port of a global catalog server. The Global Catalog ports are 3268 and 3269 by default, but the port remains admin-configured.

   See Using a remote user domain in a multi-domain Active Directory forest.

4. Select a directory type. If you select OpenLDAP, additional parameters appear. Make sure that these parameters match your LDAP server configuration.
5. When you are finished, click Save.

   If you selected the SSL connection type, a Trust the certificate window appears. Review the certificate details and click Trust.

   Note:

   If you want to use an external certificate chain, you can upload it after you click Trust. When you return to the Access management page, click Edit remote user domain to upload the certificate chain. See Editing a remote user domain in the Flex Appliance Console.