Revocation

(new in 12.1)

(new in 15.0.1) By default, the setting Automatically revoke certificates of inactive users is inactive. By activating this option, certificates of inactive users are automatically revoked.

By default, the setting Automatically check revocation status every day is inactive. By activating this option, certificates of the SEPPmail Secure E-Mail Gateway users listed under Users are automatically subjected to a validity check once a day.

Clicking on the Check OCSP/CRL status now button immediately causes certificates of the Users listed in SEPPmail Secure E-Mail Gateway to be checked via OCSP (Online Certificate Status Protocol) and/or CRL (Certificate Revocation List).

2-Factor Authentication

(new in 13.0.6)

By default, the setting Require MFA via an Authenticator app for members of below selected groups is inactive.

Activate the setting to activate the two factor authentication. The MFA setup must be initialised once and the MFA token must then be attached to the password upon login.

Via Select, select one or more groups. If there are several groups, membership on one group is sufficient to activate the MFA for the user.

Connection Settings

Authenticate users to external LDAP server (e.g. Active Directory)

Check to authenticate users against an external LDAP.

Server

Enter the server address.

Port

Enter the port.

TLS required

Check if TSL should be required.

Bind DN

Enter the Bind DN.

Bind Password

Enter the Bind Password.

User Attributes

Enter the following LDAP attributes:

•LDAP  Object Class, for example 'person'

•Search Base

•E-Mail Attribute (default: 'mail')

Group Attributes

Enter LDAP group attributes analog to the user attributes.

Login Test

Enter a user and password to test whether the login via LDAP works.

Mapping Settings

Remote Group

Select a remote group for the mapping.

Local Group

Select one of more local groups as mapping targets.