LDAP Authorization in Mirth® Connect by NextGen Healthcare

When the Lightweight Directory Access Protocol (LDAP) extension is installed, users can log on to Mirth® Connect by NextGen Healthcare using credentials that are controlled by a separate LDAP directory.

The connection between Mirth® Connect and the Lightweight Directory Access Protocol (LDAP) server can be encrypted if needed for security. You can use the Role-Based Access Control extension for Mirth® Connect to assign roles to specific groups of user accounts in the LDAP directory.

The LDAP extension is designed to work with LDAP directory services such as:

• Active Directory
• OpenLDAP™
• ApacheDS™

You can configure LDAP integration in Mirth® Connect in Settings > LDAP Authorization:

When LDAP authorization is enabled, only user accounts that exist in the LDAP Directory are permitted to log on to Mirth® Connect. Any local Mirth® Connect user accounts (listed under Users in Mirth® Connect) are disabled. These accounts are re-enabled if LDAP authorization is later disabled.

When users log on with their LDAP account credentials, their username and hashed password are stored locally in Mirth® Connect. If LDAP authorization is disabled, these user accounts remain as active, local user accounts with the most recent password that was used.

For details on installing an extension, refer to the User Guide for Mirth® Connect by NextGen Healthcare available on the NextGen Knowledge Center.