Identity Manager 8.0 - Configuration Guide

Editing Authentication Modules

To enable other authentication modules

1. Select the category Base Data | Security settings | Authentication modules in the Designer.
2. Select the authentication module and set the option Enabled to "True".

3. Save the changes to the database using Database | Commit to database....

4. Click Save.

   This allows you to log in to the assigned application using this authentication module. Ensure that users found through the authentication module have the required permissions to use the program.

If create custom authentication modules, assign them to the existing programs. Assignments to predefined authentication modules must not normally be changed.

To assign an authentication module to programs

1. Select the category Base Data | Security settings | Authentication modules in the Designer.
2. Select View | Select table relations... in the menu.
3. Enable the table DialogProductHasAuthentifier.

   This shows the tab Programs.

4. Select the authentication module and assign it to programs.

Detailed information about this topic

• Authentication Module Properties
• Initial Data for Authentication Modules
• Configuration Data for System User Dynamic Authentication
• One Identity Manager Authentication Module

Authentication Module Properties

Related Topics

• Initial Data for Authentication Modules

Initial Data for Authentication Modules

The authentication string is formatted as follows:

Module=<name>;<property1>=<value1>;<property2>=<value2>,…

Example:

Module=DialogUser;User=viadmin;Password=*****

The initial data is one part of the authentication string (parameter-value pair without module ID). Initial data from the authentication string is preallocated by default for each authentication instance.

To specify initial data

1. Select the category Base Data | Security settings | Authentication modules in the Designer.
2. Select the authentication module and enter the data in Initial data.

   Syntax:

   property1=value1;property2=value2

   Example:

   user=viadmin;password=*****

You can use different initial data depending on the authentication module.

Related Topics

• Configuration Data for System User Dynamic Authentication
• One Identity Manager Authentication Module

Configuration Data for System User Dynamic Authentication

In the case of dynamic authentication modules, the system user assigned to the employee is not used for the log in. The system user which is configured using the user interface special configuration data is taken instead.

To specify configuration data

1. Select the category Base Data | Security settings | Programs in the Designer.
2. Select the application and adjust the Configuration data.

Use XML syntax for entering the configuration data:

Enter the system user (DialogUser) in Usermappings section. Specify which employee the given system user should use with the selection criterion (Selection). You are not obliged to enter a selection criterion for the assignment. The first system user that has the required assignment is used for the log in.

You can assign function groups to permissions groups on order to deal with complex rights and user interface structures. The function groups allow you to map the functions an employee has in the company, for example, IT controller or branch manager. Assign the function groups to the permissions groups. A function group can refer to several permissions groups and several function groups can refer to one permissions group.

If the section FunctionGroupMapping is in the configuration data, this is evaluated first and the system user that is found is used. The authentication module uses the system user that is the exact member of the permissions group found for the login. If none is found the section Usermapping is evaluated.