What does this section cover?
What is User Authentication?
User authentication settings are used to define the password policy for accessing CRM.COM Software, i.e. the criteria that passwords must conform with. The password policy is taken into consideration whenever a new password for an existing or new user is set. If user authentication settings are not configured in the system, then only super users can access the system.
In addition use the settings to define how many failed login attempts a user can perform within a period of time before they result to a specific lockout time. During this lockout time, the user will not be able to login, even if the correct credentials are provided.
Additionally using User Authentication you have the option to define whether authentication of users at login will be done using CRM.COM authentication or LDAP/Active Directory authentication.
Creating, Editing & Deleting Validations & Restrictions
Action | Validations | Restrictions |
---|---|---|
General |
|
|
Create |
|
|
Edit |
|
|
Delete |
|
|
User Authentications attributes
Name | Description |
---|---|
PASSWORD POLICY | |
Minimum length* | The minimum required length of the password |
Minimum number of alphabetical characters (a-z)* | The minimum number of alphabetical characters (a-z) that should be included in the password |
Minimum number of integers (0-9)* | The minimum number of integers (0-9) that should be included in the password |
Minimum number of other (special) characters* | The minimum number of special characters that should be included in the password |
AUTHENTICATION POLICY AVAILABLE FROM CRM.COM R9 | |
Use Active Directory/LDAP Authentication | Defines whether Active Directory/LDAP settings will be used during the authentication process. |
Server Type* | Defines whether authentication will be performed based on Active Directory/LDAP |
Domain* | The domain of the Active Directory server |
URL* | Host name of the machine where the directory is installed |
Port* | Port number of the directory server |
Username* | A valid username of a user with authority to connect to the Active Directory Server |
Password* | The valid password of the user with authority to connect to the Active Directory Server |
Search base | Indicates where in the LDAP directory you wish to begin the search |
Use SSL | Defines whether an SSL connection will be used |
Password ageing warning (in days) | Defines the number of days prior which the user will be notified through CRM.COM about his/her password expiration in Active Directory |
INVALID AUTHENTICATION POLICY AVAILABLE FROM CRM.COM R9 | |
Maximum allowed invalid login attempts |
|
Lock-out Time After Invalid Login Attempts (in Minutes) | Defines the user lock-out time (in minutes) after the maximum allowed login attempts were made in a specific period of time |
IP AUTHORIZATION RULES AVAILABLE FROM CRM.COM R9 IP Authorization Rules are used to define IP addresses from which users can access CRM.COM or IP addresses from which users can never access CRM.COM. Each IP Authorization Rule has a set of restrictions which represents the Allowed and Denied IP Addresses. An IP Address restriction can either be a specific IP address, a range of IP Addresses or an IP Address Pattern. Each IP Authorization Rule also has a set of Conditions which defines the set of users for which the rule is applied. This set of conditions includes Users, Units, Groups or Communities in any required combination. Multiple IP Authorization Rules can be configured and used but only as long as they are in Active state. | |
State | The IP Authorization Rule's state which can either be Active or Inactive. By default the State is set to Inactive. Only Active IP Authorization Rules are evaluated and applied. |
IP Addresses Restrictions | Defines a list of IP Addresses from which users are allowed or denied access to CRM.COM. At least one IP address must be specified. |
Applied to Organisational Units | Defines the conditions that should be met in order for the IP Authorization Rule to be applied. The conditions include Users and Organizational Units. If no conditions are defined, then the IP Authorization Rule is applied for all Users and Organizational Units. |
Defining your own User Authentications tailored to your company's needs
- Navigate to FOUNDATION > USER MANAGEMENT > SET UP USER AUTHENTICATION SETTINGS
- Click on EDIT
PASSWORD POLICY
- Update the information as required to set up password formatting restrictions
AUTHENTICATION POLICY - AVAILABLE FROM CRM.COM R9
- Use CRM.COM Authentication: Check the box to enable the rest of the settings
Server Type: Select from the drop down list Active Directory/LDAP
- Provide the rest of the information according to the Active Directory you would like to import users from
When setting up Authentication Policy you will need to logout and login again before the changes take effect.
Check out Testing Active Directory/LDAP connection
INVALID AUTHENTICATION POLICY - AVAILABLE FROM CRM.COM R9
- Provide the information required with regards to handling invalid login attempts
IP AUTHORIZATION RULES - AVAILABLE FROM CRM.COM R9
- Click on ADD to add a new rule
You can add multiple rules - Click on the rule you added, from the panel list to select and define the rules and condition:
- State: Select if the rule will be Active or Inactive
- IP Addresses Restrictions: Add the IP Addresses
- Applied to Organisational Units:
- Click on "ADD" and select between
- UNIT
- USERS
- Use the Search modal to select the Organisational unit you would like to add.
- You can select any type of Organisational unit according to the restrictions that you would like to set or none at all.
- Click on "ADD" and select between
- Click on ADD to add a new rule
- From the Actions Menu click on SAVE
You will be required to logout and login again, for the settings to be applied
Testing Active Directory / LDAP Connection
Once you configure Authentication Policy and you save the Settings you should check Active Directory/LDAP connection. To do so follow the steps below
- From the Action Menu click on ACTIONS > TEST CONNECTION
- The system will show a message whether the connection test is successful or failed
Deleting User Authentications
You cannot delete a user authentication record
Related Areas
-
Configuring User Authentication Settings — Learn to configure User Authentication Settings
-
Configuring User Templates — Learn to configure User Templates
-
Understanding User Management — Understand the usage of User Management within CRM.COM
-
Managing Users — Learn to work with Users
-
Bulk Users Creation — Learn how to generate a large volume of Users using User Templates
-
Handling Invalid Login Attempts — Learn to handle Invalid User Login Attempts
Popular Labels
- accounts-receivable
- accounts-receivable-admin
- accounts-receivable-advanced
- accounts-receivable-advanced-r7
- accounts-receivable-basics
- activities
- activities-admin
- activities-admin-r7
- activities-basics
- activities-basics-r7
- additive-discounts-admin
- additive-discounts-advanced
- additive-discounts-basics
- billing-application
- billing-engine
- communication-centre
- communications-admin-r7
- communications-advanced-r7
- conax-web-services
- conax-web-services-advanced
- contact-information-admin
- contact-information-admin-r7
- crm-application
- crm-application-r7
- customer-events-basics-r7
- dashboards
- dashboards-advanced
- finance-application
- financial-transactions-admin
- financial-transactions-admin-r7
- financial-transactions-advanced
- financial-transactions-advanced-r7
- foundation-application
- foundation-application-r7
- global
- inventory-management-advanced
- inventory-management-basics
- inventory-management-basics-r7
- jobs
- jobs-admin
- jobs-admin-r7
- jobs-advanced
- jobs-basics
- jobs-basics-r7
- leads
- leads-admin
- leads-admin-r7
- leads-advanced
- network-management-basics
- network-management-basics-r7
- normal-billing-admin-r7
- normal-billing-r7
- normal-billing-run-admin
- normal-billing-run-basics
- notifications
- notifications-basics
- panaccess_advanced
- platform-basics
- prepaid-billing-basics
- prepaid-billing-r7
- products-admin-r7
- rated-billing-items-advanced
- rated-billing-items-basics
- reports-basics
- resource-scheduling
- resource-scheduling-advanced
- rewards-admin
- rewards-admin-r7
- rewards-advanced
- rewards-advanced-r7
- rewards-basics
- rewards-basics-r7
- security-management-advanced
- segmentation-basics
- service-requests
- service-requests-admin
- service-requests-admin-r7
- service-requests-advanced
- service-requests-advanced-r7
- stripe
- subscription-actions-r7
- subscriptions
- subscriptions-advanced
- subscriptions-advanced-r7
- subscriptions-basics
- subscriptions-basics-r7
- udrs-admin-r7
- usage-service-r7
- user-management
- user-management-basics
- vouchers-advanced
- vouchers-basics
- wallets
- wallets-advanced
- wallets-basics
- warranty-policies-advanced-r7
- workflows-admin-r7
- workflows-advanced-r7
- workflows-r7
- zapier-basics-r7