Configuring the authentication method
After you configure access, select the required authentication method. You can select one or more methods.
You can select from the following authentication methods:
- Internal users;
- LDAP;
- SSO.
When you select Internal users, only internal system users can authenticate.
To select LDAP and SSO, make sure that LDAP and SSO are configured in the system. For configuration instructions, see Configuring LDAP and Configuring SSO.
After you configure them, complete the following steps:
- Go to Access management → Groups.
- Depending on the authentication method, do one of the following:
- Add at least one group with a configured link to an LDAP/SSO group, or edit an existing group;
For more information about configuring a link to an LDAP/SSO group, see Field mapping when integrating with SSO services.
- For SSO, add at least one role or group with a configured link to the corresponding SSO parameter.
When you add new users to a group linked to LDAP/SSO, the permissions specified for the group are added to the user's role permissions.
- Select one or more authentication methods in the Authentication method section.
When you select SSO only (Forced SSO), you can't manage users and roles using the internal admin account.
- Select Switch.
Important! When you change the authentication method, all users' sessions end. Users will then sign in using the configured authentication method.
