| Excerpt | ||
|---|---|---|
| ||
Learn how you can configure User Authentications |
What does this section cover?
| Table of Contents | ||
|---|---|---|
|
What is User Authentication?
User authentication settings are used to define the password policy for accessing CRM.COM Software, i.e. the criteria that passwords must conform with. The password policy is taken into consideration whenever a new password for an existing or new user is set. If user authentication settings are not configured in the system, then only super users can access the system.
In addition use the settings to define how many failed login attempts a user can perform within a period of time before they result to a specific lockout time. During this lockout time, the user will not be able to login, even if the correct credentials are provided.
Additionally using User Authentication you have the option to define whether authentication of users at login will be done using CRM.COM authentication or LDAP/Active Directory authentication.
Creating, Editing & Deleting Validations & Restrictions
| Action | Validations | Restrictions |
|---|---|---|
| General |
|
|
| Create |
|
|
| Edit |
|
|
| Delete |
|
|
User Authentications attributes
Name | Description | ||||||
|---|---|---|---|---|---|---|---|
| PASSWORD POLICY | |||||||
| Minimum length* | The minimum required length of the password | ||||||
| Minimum number of alphabetical characters (a-z)* | The minimum number of alphabetical characters (a-z) that should be included in the password | ||||||
| Minimum number of integers (0-9)* | The minimum number of integers (0-9) that should be included in the password | ||||||
| Minimum number of other (special) characters* | The minimum number of special characters that should be included in the password | ||||||
AUTHENTICATION POLICY
| |||||||
Use Active Directory/LDAP Authentication | Defines whether Active Directory/LDAP settings will be used during the authentication process. | ||||||
Server Type* | Defines whether authentication will be performed based on Active Directory/LDAP | ||||||
Domain* | The domain of the Active Directory server | ||||||
URL* | Host name of the machine where the directory is installed | ||||||
Port* | Port number of the directory server | ||||||
Username* | A valid username of a user with authority to connect to the Active Directory Server | ||||||
Password* | The valid password of the user with authority to connect to the Active Directory Server | ||||||
Search base | Indicates where in the LDAP directory you wish to begin the search | ||||||
| Use SSL | Defines whether an SSL connection will be used | ||||||
| Password ageing warning (in days) | Defines the number of days prior which the user will be notified through CRM.COM about his/her password expiration in Active Directory | ||||||
INVALID AUTHENTICATION POLICY
| |||||||
Maximum allowed invalid login attempts |
| ||||||
Lock-out Time After Invalid Login Attempts (in Minutes) | Defines the user lock-out time (in minutes) after the maximum allowed login attempts were made in a specific period of time | ||||||
Defining your own User Authentications tailored to your company's needs
- Navigate to FOUNDATION > USER MANAGEMENT > SET UP USER AUTHENTICATION SETTINGS
- Click on EDIT
PASSWORD POLICY
- Update the information as required to set up password formatting restrictions
AUTHENTICATION POLICY -
Status colour Red title Available from CRM.COM R9 - Use CRM.COM Authentication: Check the box to enable the rest of the settings
Server Type: Select from the drop down list Active Directory/LDAP
- Provide the rest of the information according to the Active Directory you would like to import users from
When setting up Authentication Policy you will need to logout and login again before the changes take effect.
Check out Testing Active Directory/LDAP connection
INVALID AUTHENTICATION POLICY -
Status colour Red title Available from CRM.COM R9 - Provide the information required with regards to handling invalid login attempts
From the Actions Menu click on SAVE
You will be required to logout and login again, for the settings to be applied
| Anchor | ||||
|---|---|---|---|---|
|
Once you configure Authentication Policy and you save the Settings you should check Active Directory/LDAP connection. To do so follow the steps below
- From the Action Menu click on ACTIONS > TEST CONNECTION
- The system will show a message whether the connection test is successful or failed
Deleting User Authentications
You cannot delete a user authentication record
| Panel | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ||||||||||||
Related Areas
|
| Panel | ||||||
|---|---|---|---|---|---|---|
| ||||||
Popular Labels
|