Let your users sign in with their Windows domain password. Validate credentials against Active Directory, OpenLDAP or any LDAP v3 directory over an encrypted connection, and read the groups that decide what they can do.
An LDAP v3 client built to authenticate users, search the directory and resolve group membership, including nested Active Directory groups.
TsgcLDAPClient (unit sgcAuth_LDAP_Client)
Windows, macOS, Linux, iOS, Android
Enterprise and All-Access, plus the sgcAuth pack. Also available in sgcWebSockets .NET.
Point Host at a domain controller, choose LDAPS or StartTLS, set the service account in BindDN / Password, then call Authenticate with what the user typed.
uses
sgcAuth_LDAP_Classes, sgcAuth_LDAP_Client;
var
LDAP: TsgcLDAPClient;
vUserDN: string;
oGroups: TStringList;
begin
LDAP := TsgcLDAPClient.Create(nil);
LDAP.Host := 'dc01.corp.example.com';
LDAP.Security := ldapsecLDAPS; // implicit TLS, port 636
LDAP.BindDN := 'CN=svc-login,OU=Service,DC=corp,DC=example,DC=com';
LDAP.Password := 'service-password';
LDAP.BaseDN := 'DC=corp,DC=example,DC=com';
// find the user with UserSearchFilter, then bind as that DN
LDAP.AuthenticationMode := ldapamSearchThenBind;
LDAP.Connect;
if LDAP.Authenticate(edtUser.Text, edtPassword.Text, vUserDN) then
begin
oGroups := TStringList.Create;
try
// True: nested groups through LDAP_MATCHING_RULE_IN_CHAIN
LDAP.GetUserGroups(vUserDN, oGroups, True);
finally
oGroups.Free;
end;
end
else
ShowMessage(LDAP.LastErrorMessage);
end;// uses: sgcAuth_LDAP_Classes, sgcAuth_LDAP_Client
TsgcLDAPClient *LDAP = new TsgcLDAPClient(this);
LDAP->Host = "dc01.corp.example.com";
LDAP->Security = ldapsecLDAPS;
LDAP->BindDN = "CN=svc-login,OU=Service,DC=corp,DC=example,DC=com";
LDAP->Password = "service-password";
LDAP->BaseDN = "DC=corp,DC=example,DC=com";
LDAP->AuthenticationMode = ldapamSearchThenBind;
LDAP->Connect();
String UserDN;
if (LDAP->Authenticate(edtUser->Text, edtPassword->Text, UserDN))
{
TStringList *Groups = new TStringList();
LDAP->GetUserGroups(UserDN, Groups, true);
delete Groups;
}Directory sign-in for desktop apps, web back ends and services, with the security details handled for you.
Security selects ldapsecLDAPS (implicit TLS on port 636) or ldapsecStartTLS (upgrade on port 389). If the server refuses StartTLS the connection is closed, the client never falls back to clear text. TLSOptions controls certificate verification.
AuthenticationMode turns the typed name into a bind name: ldapamUPN (user@UPNSuffix), ldapamDownLevel (Domain\user), ldapamSearchThenBind (service bind plus UserSearchFilter) or ldapamDN.
GetUserGroups returns the direct memberOf values, or with aNested every group reached through other groups, using the Active Directory rule LDAP_MATCHING_RULE_IN_CHAIN.
Search uses Simple Paged Results automatically (PageSize, 500 by default), honours SizeLimit and TimeLimit, and returns the entries and referrals in a TsgcLDAPEntries list.
Bind refuses a DN with an empty password without contacting the server, closing the unauthenticated bind hole of RFC 4513. WhoAmI, LastResultCode and LastErrorMessage tell you exactly who is bound and why a call failed.
Every public method is serialized, so a single TsgcLDAPClient can serve the login requests of a multi-threaded HTTP or WebSocket server.
Deep-link to the component reference, grab the ready-to-run demo project, and download the trial.
| Online Help: TsgcLDAPClient Full property, method and event reference for this component. | Open | |
| Demo Project: Demos\26.Authentication\05.LDAP_ActiveDirectory Connect with LDAPS or StartTLS, authenticate in every mode, search and list nested groups. Ships inside the sgcWebSockets package, download the trial below. | Open | |
| Technical Document (PDF) Features, quick start, code samples for Delphi & C++ Builder and primary-source references for this component only. | Open | |
| User Manual (PDF) Comprehensive manual covering every component in the library. | Open | |
| Blog: Delphi Login With Passkeys, SAML SSO, LDAP and TOTP 2FA How the six authentication components fit together in one Delphi application. | Open |