webPOS 4.0
Integration with
LDAP
Active Directory
Modern POS systems and business applications must meet security requirements and facilitate centralized user management. That is why our system supports integration with Microsoft Active Directory (LDAP), allowing user authentication and authorization without the need to create separate accounts in the application.
Thanks to the integration, all logins take place using existing data in the LDAP directory, which enhances security, simplifies administration, and facilitates access control.
LDAP integration features
Our integration with Active Directory covers key areas of user management:
Authentication
(Login)
- Login to the system uses domain credentials (user’s login/password from AD).
- Direct authentication (bind) with the LDAP directory is supported.
- The system supports secure connections via LDAPS (port 636) or StartTLS (port 389).
Authorization (Permissions)
- Roles and permissions in the system can be mapped to Active Directory domain groups.
- It is possible to assign roles based on LDAP attributes (e.g. memberOf).
- This gives administrators full control over which resources and modules of the system are available to each employee.
User
management
- There is no need to manually create accounts in the system — users are synchronized from AD.
- Account updates (e.g. password change, account lock, deactivation) are immediately visible in the system.
- The ability to define access policies consistent with domain settings (password policy, MFA, account lockouts).
Integration architecture
The LDAP integration works in a central user directory model.
Technical benefits
Use cases
- A store chain with many employees – everyone logs in to POS using the same credentials they use in the company system.
- Multibranch organization – different domain groups correspond to different roles in the system (e.g. cashiers, managers, administrators).
- Environments requiring a high level of security – thanks to LDAPS, all communication is encrypted.