Skip to end of banner
Go to start of banner

R9 - Configuring User Authentication Settings

Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 2 Next »

What does this section cover?

What is User Authentication?

User authentication settings are used to define the password policy for accessing CRM.COM Software, i.e. the criteria that passwords must conform with. The password policy is taken into consideration whenever a new password for an existing or new user is set. If user authentication settings are not configured in the system, then only super users can access the system.

In addition use the settings to define how many failed login attempts a user can perform within a period of time before they result to a specific lockout time. During this lockout time, the user will not be able to login, even if the correct credentials are provided.

Creating, Editing & Deleting Validations & Restrictions

ActionValidationsRestrictions
General
  • Not Applicable
  •  If user authentication settings are not configured in the system, then only super users can access the system. all information is considered as mandatory.
  • Only 1 password policy can be set in the system
Create
  • All mandatory fields must be provided
  • Not Applicable
Edit
  • All mandatory fields must be provided
  • Not Applicable
Delete
  • Not Applicable
  • You cannot delete a user authentication record

User Authentications  attributes 

Name

Description

PASSWORD POLICY
Minimum length*The minimum required length of the password
Minimum number of alphabetical characters (a-z)*The minimum number of alphabetical characters (a-z) that should be included in the password
Minimum number of integers (0-9)*The minimum number of integers (0-9) that should be included in the password
Minimum number of other (special) characters*The minimum number of special characters that should be included in the password

AUTHENTICATION POLICIES

AVAILABLE FROM CRM.COM R9

Use CRM.COM Authentication

Defines whether a user's credentials kept in CRM.COM will be used during the user's authentication or Active Directory/LDAP will be used during the authentication process.

Server Type*

Defines whether authentication will be performed based on Active Directory or LDAP

Domain*

The domain of the Active Directory server

URL*

Host name of the machine where the directory is installed

Port*

Port number of the directory server

Username*

A valid username of a user with authority to connect to the Active Directory Server

Password*

The valid password of the user with authority to connect to the Active Directory Server

Search base

Indicates where in the LDAP directory you wish to begin the search

Use SSL 
Password ageing warning (in days)Defines the number of days prior which the user will be notified through CRM.COM about his/her password expiration in Active Directory
External Site to change User PasswordURL of the site that external users can use in order to change their password

INVALID AUTHENTICATION POLICIES

AVAILABLE FROM CRM.COM R9

Maximum allowed invalid login attempts

  • Maximum Allowed Invalid Login Attempts: Defines the maximum allowed invalid login attempts for all users in combination with
  • Invalid Login Attempts Every X Minutes: The period, in minutes, during which the user will make these failed login attempts 
    which will result in user lockout period.

Lock-out Time After Invalid Login Attempts (in Minutes)

Defines the user lock-out time (in minutes) after the maximum allowed login attempts were made in a specific period of time

Defining your own User Authentications  tailored to your company's needs

  1. Navigate to FOUNDATION > USER MANAGEMENT > SET UP USER AUTHENTICATION SETTINGS 
    USER AUTHENTICATION SETTINGS
  2. Click on EDIT

  3. PASSWORD POLICY

    1. Update the information as required to set up password formatting restrictions

  4. AUTHENTICATION POLICY - AVAILABLE FROM CRM.COM R9

    1. Use CRM.COM Authentication: Check the box to enable the rest of the settings

    2. Server Type: Select from the drop down list between Active Directory and LDAP

    3. Provide the rest of the information according to the server type you would like to integrate with

  5. INVALID AUTHENTICATION POLICIES - AVAILABLE FROM CRM.COM R9

    1. Provide the information required with regards to handling invalid login attempts

  6. From the Actions Menu click on SAVE

  7. You will be required to logout and login again, for the settings to be applied

Deleting User Authentications

You cannot delete a user authentication record

Related Areas

Popular Labels

  • No labels