Enterprise Edition
Enterprise Edition
The Enterprise Edition has several additional features over the Community Edition, that will help you to manage a large number of users and tokens.
The LinOTP 2 Enterprise Edition also provides UserIdResolvers for LDAP and SQL. Thus you can not only have the users in a local file, but also in a remote LDAP or SQL database. All UserIdResolvers will only do a read access on the user database.
SQL UserIdResolver
The SQL UserIdResolver can be used to read users from SQL databases. In combination with the validate WebAPI, this is a possibility to enhance many web application, that host their users in an SQL database with One Time Passwords.
LDAP UserIdResolver
The LDAP UserIdResolver can be used to read the users from LDAP servers like OpenLDAP, from Active Directory or Novell eDirectory.
You can provide sophisticated search patterns, so that you may find the users in your user database based on any possible attribute or attribute combination.
The LDAP UserIdResolver also provides redundancy, by just adding more than one LDAP URI, devided by a comma.
ldap://domaincontroller1, ldap://domaincontroller2, ldap://domaincontroller3
GTK GUI
Token support
The eToken NG-OTP is only supported by the Enterprise Edition. The eToken NG-OTP is a hardware token, that comes without a preinstalled secret/seed (or HMAC key). I.e. the token comes blank from the factory. The LinOTP 2 Management Client will initialize the token and implant the necessary secret on the token, without showing the secret to the administrator or anybody else. Thus you can be sure, that no user, administrator or reseller has ever seen your HMAC key. ...and you don't even know it, too! ;-)