4.3 Authentication Settings

4.3.1 LDAP Server Configuration#

The VGN Access tab (see Section 2.7.3.1) provides LDAP server configuration for directory service integration. The LDAP servers table displays Name, Server URL, Base DN, and action buttons for Edit and Delete.

Click Add LDAP Server to configure a new LDAP connection with the following parameters:

Parameter	Description
Name	A descriptive name for this LDAP configuration
Description	Purpose and scope of the LDAP integration
Server URL	LDAP server hostname or IP address
Port	LDAP service port
Base DN	Base Distinguished Name for directory searches
Bind DN	Distinguished Name for LDAP binding
Bind Password	Password for the bind user
Use SSL/TLS	Toggle encrypted connection
User Search Filter	LDAP filter for user searches
Group Search Filter	LDAP filter for group searches
Group Attribute	Attribute used to identify groups

4.3.2 LDAP Credentials for G-Token Deployment#

The G-Token Deployment view (see Section 2.5.4.4) includes LDAP credentials management for Active Directory integration. Click the LDAP Credentials button to open the management interface.

Click Add LDAP Credential to configure a new connection with the following sections:

Basic Info:

Parameter	Description
Display Name	A descriptive name for this LDAP connection

Connection:

Parameter	Description
LDAP Server	Hostname or IP address of the LDAP server
Port	LDAP service port (default: 389 for plaintext, 636 for SSL)
SSL / TLS Encryption	Encryption method selection. Options include SSL/TLS or Plaintext — not recommended

Authentication:

Parameter	Description
Username / Bind DN	Distinguished Name for LDAP binding
Bind Password	Password for the bind user

Directory:

Parameter	Description
Base DN	Base Distinguished Name for directory searches
Search Filter	Optional LDAP filter to restrict search results

4.3.3 LDAP List in Settings Policies#

The LDAP List within the Settings Policies Credentials sub-tab (see Section 2.15.2.1.3) provides additional LDAP configuration management. Click the Add button to configure a new LDAP connection with the following parameters:

Parameter	Description
Name	A descriptive name for the LDAP connection
URL	LDAP server URL
Start TLS	Enables TLS encryption when active
Bind User	Username for LDAP binding
Bind Password	Password for the bind user
Connection Certificate	Certificate for the LDAP connection
TLS Certificate	TLS certificate file
TLS Key	TLS key file
Certificate Validation	Enables certificate validation when active
Ldap Extension	Additional LDAP extension parameters

4.3.4 MFA Policies#

The MFA Policies tab within the VGN module (see Section 2.7.4) manages multi-factor authentication requirements for VPN access. The MFA policies table displays Policy Name, Description, Timeout, Channels, and action buttons.

Click Add New Policy to create an MFA policy with the following parameters:

Parameter	Description
Policy Name	A descriptive name for the policy
Description	Purpose and scope of the policy
Timeout (seconds)	Time limit for MFA code entry (range: 30-600 seconds)

MFA Channels — select at least one:

Channel	Description
DISCORD	Discord-based verification
EMAIL	Email-based verification
SMS	SMS-based verification
TELEGRAM	Telegram-based verification
TOTP	Time-based One-Time Password (authenticator app)

Note: You must select at least one MFA channel. The system will display a validation message: "Please select at least one MFA channel."

4.3.5 Web Interface Login#

The Guardpot web interface (see Section 1.3.1) uses email-based authentication. Navigate to the configured DNS address and enter the default credentials:

• Username: [email protected]
• Password: Guardpot.123