Skip to end of banner
Go to start of banner

R9 - Configuring User Authentication Settings

Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 11 Next »

What does this section cover?

What is User Authentication?

User authentication settings are used to define the password policy for accessing CRM.COM Software, i.e. the criteria that passwords must conform with. The password policy is taken into consideration whenever a new password for an existing or new user is set. If user authentication settings are not configured in the system, then only super users can access the system.

In addition use the settings to define how many failed login attempts a user can perform within a period of time before they result to a specific lockout time. During this lockout time, the user will not be able to login, even if the correct credentials are provided.

Additionally using User Authentication you have the option to define whether authentication of users at login will be done using CRM.COM authentication or LDAP/Active Directory authentication. 

Creating, Editing & Deleting Validations & Restrictions

ActionValidationsRestrictions
General
  • Not Applicable
  •  If user authentication settings are not configured in the system, then only super users can access the system. all information is considered as mandatory.
  • Only 1 password policy can be set in the system
Create
  • All mandatory fields must be provided
  • Not Applicable
Edit
  • All mandatory fields must be provided
  • Not Applicable
Delete
  • Not Applicable
  • You cannot delete a user authentication record

User Authentications  attributes 

Name

Description

PASSWORD POLICY
Minimum length*The minimum required length of the password
Minimum number of alphabetical characters (a-z)*The minimum number of alphabetical characters (a-z) that should be included in the password
Minimum number of integers (0-9)*The minimum number of integers (0-9) that should be included in the password
Minimum number of other (special) characters*The minimum number of special characters that should be included in the password

AUTHENTICATION POLICY

AVAILABLE FROM CRM.COM R9

Use Active Directory/LDAP Authentication

Defines whether Active Directory/LDAP settings will be used during the authentication process.

Server Type*

Defines whether authentication will be performed based on Active Directory/LDAP

Domain*

The domain of the Active Directory server

URL*

Host name of the machine where the directory is installed

Port*

Port number of the directory server

Username*

A valid username of a user with authority to connect to the Active Directory Server

Password*

The valid password of the user with authority to connect to the Active Directory Server

Search base

Indicates where in the LDAP directory you wish to begin the search

Use SSLDefines whether an SSL connection will be used
Password ageing warning (in days)Defines the number of days prior which the user will be notified through CRM.COM about his/her password expiration in Active Directory

INVALID AUTHENTICATION POLICY

AVAILABLE FROM CRM.COM R9

Maximum allowed invalid login attempts

  • Maximum Allowed Invalid Login Attempts: Defines the maximum allowed invalid login attempts for all users in combination with
  • Invalid Login Attempts Every X Minutes: The period, in minutes, during which the user will make these failed login attempts 
    which will result in user lockout period.

Lock-out Time After Invalid Login Attempts (in Minutes)

Defines the user lock-out time (in minutes) after the maximum allowed login attempts were made in a specific period of time

Defining your own User Authentications  tailored to your company's needs

  1. Navigate to FOUNDATION > USER MANAGEMENT > SET UP USER AUTHENTICATION SETTINGS 
    USER AUTHENTICATION SETTINGS
  2. Click on EDIT

  3. PASSWORD POLICY

    1. Update the information as required to set up password formatting restrictions

  4. AUTHENTICATION POLICY - AVAILABLE FROM CRM.COM R9

    1. Use CRM.COM Authentication: Check the box to enable the rest of the settings

    2. Server Type: Select from the drop down list Active Directory/LDAP

    3. Provide the rest of the information according to the Active Directory you would like to import users from
      When setting up Authentication Policy you will need to logout and login again before the changes take effect. 
      Check out Testing Active Directory/LDAP connection 

  5. INVALID AUTHENTICATION POLICY - AVAILABLE FROM CRM.COM R9

    1. Provide the information required with regards to handling invalid login attempts

  6. From the Actions Menu click on SAVE

  7. You will be required to logout and login again, for the settings to be applied

Testing Active Directory / LDAP Connection

Once you configure Authentication Policy and you save the Settings you should check Active Directory/LDAP connection. To do so follow the steps below

  1. From the Action Menu click on ACTIONS > TEST CONNECTION
    TEST AUTHENTICATION POLICY SETTINGS 
  2. The system will show a message whether the connection test is successful or failed

Deleting User Authentications

You cannot delete a user authentication record

Related Areas

Popular Labels

  • No labels