Set up the authentication method
After you set up access permissions, select the required authentication method. You can select one or more methods.
You can select the following authentication methods:
- Internal users;
- LDAP;
- SSO.
When you select Internal users, only internal system users can authenticate.
To select LDAP and SSO, make sure that LDAP and SSO are configured in the system. For setup instructions, see Set up LDAP and Set up SSO.
After setup, complete the following steps:
- Go to Access management → Groups.
- Depending on the authentication method, do one of the following:
- Add at least one group that's linked to an LDAP or SSO group, or edit an existing group.
For more information about linking a group to an LDAP or SSO group, see Field mapping when integrating with SSO services.
- When you set up SSO, add at least one role or group that's linked to the corresponding SSO parameter.
When you add new users to a group linked to LDAP or SSO, the permissions specified for the group are combined with the user's role permissions.
- Select one or more authentication methods in the Authentication method section.
When you select SSO only (Forced SSO), you can't manage users and roles by using the internal admin account.
- Select Switch.
Important! When you change the authentication method, all users' sessions end. Users must then sign in by using the configured authentication method.
