通过服务器进行用户认证 (比如, CRM 服务器，LDAP)

当前位置：

2023-10-31 14:44 会议系统问题

您可以让公司所有员工都能随时使用TurboMeeting，安全起见，您可以设置用户认证。比如，您可以用CRM系统或者LDAP去进行认证，这样您可以方便的在一个系统里管理所有用户。
整合前，您需要设置一个连接器，也就是网络服务器：
1. 接受一个TurboMeeting服务器的用户认证URL
2. 分析URL，发送一个用户认证邀请给您的服务器
3. 根据服务器的反馈，返回给TurboMeeting服务器一个适当的XML回应
TurboMeeting服务器URL的参数如下：

email	The email address that a user inputs to a TurboMeeting client. Note that the email address can be any string, for example, a user name. It depends on the user authentication format of your server.
password	The password that a user inputs to a TurboMeeting client. Note that the password is secured between TurboMeeting client and server via both proprietary encryption and SSL encryption. The transmission of the password between the TurboMeeting server and your server can be encrypted by SSL if you instructs the TurboMeeting server to use a HTTPS user authentication URL.

从您的服务器到TurboMeeting服务器的反馈，应该与下列语句相同：

<__Return__>
<__Status__>SUCCEED
<__Reason__>
<__FirstName__>John
<__LastName__>Doe
<__Phone__>408-939-2919
<__UserId__>2910-21202
<__IsAdministrator__>Y
<__PrivilegeInteractiveMeeting__>Y
<__PrivilegeSeminar__>Y
<__PrivilegeRemoteSupport__>Y
<__PrivilegeRemoteAccess__>Y
<__PrivilegeSendFile__>Y
<__PrivilegeChat__>Y
<__PrivilegeRecord__>Y
<__VideoConference__>Y
<__UserGroupName__>
where
<__Status__> has a value of either SUCCEED or FAILED depending on whether the user authentication succeeds or not.
<__Reason__> needs a value when the Status is FAILED. The reason for failed user authentication will be displayed to TurboMeeting users.
<__FirstName__> is the first name of an authenticated user.
<__LastName__> is the last name of an authenticated user.
<__Phone__> is the phone of an authenticated user.
<__UserId__> is the user ID of an authenticated user in your server.
<__IsAdministrator__> has a value of either "Y" or "N" depending on whether the user is a system administrator.
<__PrivilegeInteractiveMeeting__> has a value of either "Y" or "N" depending on whether the user can hold an interactive meeting.
<__PrivilegeSeminar__> has a value of either "Y" or "N" depending on whether the user can host a seminar.
<__PrivilegeRemoteSupport__> has a value of either "Y" or "N" depending on whether the user can hold a remote support session.
<__PrivilegeRemoteAccess__> has a value of either "Y" or "N" depending on whether the user can host a remote access session.
<__PrivilegeSendFile__> has a value of either "Y" or "N" depending on whether the user can send files during a meeting session.
<__PrivilegeChat__> has a value of either "Y" or "N" depending on whether the user can chat during a meeting session.
<__PrivilegeRecord__> has a value of either "Y" or "N" depending on whether the user can record during a meeting session.
<__VideoConference__> has a value of either "Y" or "N" depending on whether the user can do multipoint webcam based video conferencing during a meeting session.
<__UserGroupName__> defines the user group this user belongs to.
在您设置要整合连接器之后，您应该将用户认证URL告诉TurboMeeting服务器：
1. 登录TurboMeeting系统控制主页2. 点击“整合”下的“应用程序服务器”，您会看到以下网页：

在该页上，输入您的用户认证URL，接受TurboMeeting服务器发出的呼叫。您可以使用 HTTP 或 HTTPS。但是，如果您使用HTTPS，请确认您的连接器可以回应来自含有“Content-Length”的HTTPS Header的反馈。
不要在URL里增加任何参数。TurboMeeting 服务器会在您的URL里附带两个参数，最终呼叫您连接器的URL是：
http://ldap.acme.com/authentication.aspx?email=johndoe@aceme.com&password=test
您可以选择用TurboMeeting服务器缓存密码。使用缓存的密码，当您的连接器无法工作，TurboMeeting服务器将进行用户身份验证，更以前以前成功的验证无关。缓存的密码被不可逆加密，并保存在TurboMeeting服务器的数据库中。如果您删除了一个用户帐号，当该用户登录TurboMeeting时，您的连接器会反馈“失败”。