Configure the authentication method
After you configure access permissions, select the required authentication method. You can select one or more methods.
You can select from the following authentication methods:
- Internal users;
- LDAP;
- SSO.
When you select Internal users, only internal system users can authenticate.
To select LDAP and SSO, make sure you've configured LDAP and SSO in the system. For configuration instructions, see Configure LDAP and Configure SSO.
After configuration, complete the following steps:
- Go to Access management → Groups.
- Depending on the authentication method, do the following:
- Add at least one group with a configured connection to an LDAP/SSO group, or edit an existing group;
For more information about configuring a connection to an LDAP/SSO group, see Field mapping when integrating with SSO services.
- When configuring SSO, add at least one role or group with a configured connection to the corresponding SSO parameter.
When you add new users to a group connected to LDAP/SSO, the permissions specified for the group are combined with the user's role permissions.
- Select one or more authentication methods in the Authentication method section.
When you select SSO only (Forced SSO), you can't manage users and roles using the internal admin account.
- Select Switch.
Important! When you change the authentication method, all users' sessions end. Users will then sign in using the configured authentication method.
