Define District Active Directory preferences

Set Aspen’s district Active Directory preferences to authenticate users upon login and grant them the proper roles and access to schools.

Note: Only self-hosted districts should define Active Directory preferences. Follett-hosted districts should contact Technical Services to check on the availability of Active Directory. When Active Directory is enabled, users log onto Aspen with their system password and will not be prompted with a security question or to reset their password. The Security question, Security answer, Confirm answer, and Password fields do not display in their Security User Preferences.

To set district Active Directory preferences:

1. Log on to the District view.
2. Click the District tab, Setup side-tab.
3. Under the Setup side-tab, click Preferences. The general preferences page appears.
4. Click the Category drop-down to select Active Directory.The preferences appear:

5. 

5. Use the following table to change the information in the fields:

6. Field	Description
   General
   Use active directory	Select this checkbox to enable Active Directory authentication for the district.
   Authenticate mode	Select one of the following: Authenticate only: Verifies valid password. Authenticate and roll assignment only: Verifies valid password; assigns security role corresponding to organizational unit (OU) the user is assigned from. Authenticate and full authorization: Verifies valid password; assigns security role corresponding to organizational unit (OU) the user is assigned from; assigns school corresponding to organizational unit (OU) the user is assigned to.
   First Active Directory If you have multiple active directories, use this section to enter the details for the first one.
   ID	Type the ID for the first Active Directory.
   Server name	Type the name of the server.
   Domain name	Type the name of the domain.
   Port	The default port is 389. Edit it, if necessary.
   Admin username	Type the user name of the administrator for your Active Directory.
   Admin password	Type the password of the administrator for your Active Directory.
   Second Active Directory If you have multiple active directories, use this section to enter the details for the second one.
   ID	Type the ID for the second active directory.
   Server name	Type the name of the server.
   Domain name	Type the name of the domain.
   Port	The default port is 389. Edit it, if necessary.
   Admin username	Type the user name of the administrator for your Active Directory.
   Admin password	Type the password of the administrator for your Active Directory.
   Third Active Directory If you have multiple active directories, use this section to enter the details for the third one.
   ID	Type the ID for the third Active Directory.
   Server name	Type the name of the server.
   Domain name	Type the name of the domain.
   Port	The default port is 389. Edit it, if necessary.
   Admin username	Type the user name of the administrator for your Active Directory.
   Admin password	Type the password of the administrator for your Active Directory.

6. Click Save.

You can also define an Active Directory organizational unit (OU) for a school and user role, and then associate the roles and schools with a user.