Configure the authentication method
After you configure access, select the required authentication method. You can select one or more methods.
You can select from the following authentication methods:
- Internal users;
- LDAP;
- SSO.
When you select Internal users, only internal system users can authenticate.
To select LDAP and SSO, make sure you've configured LDAP and SSO in the system. For configuration instructions, see Configure LDAP and Configure SSO.
After you finish the configuration, follow these steps:
- Go to Access management → Groups.
- Depending on the authentication method, do the following:
- Add at least one group that's linked to an LDAP/SSO group, or edit an existing group;
For more information about linking to an LDAP/SSO group, see Field mapping when integrating with SSO services.
- When you configure SSO, add at least one role or group that's linked to the corresponding SSO parameter.
When you add new users to a group linked to LDAP/SSO, the permissions specified for the group are combined with the user's role permissions.
- Select one or more authentication methods in the Authentication method section.
When you select SSO only (Forced SSO), you can't manage users and roles using the internal admin account.
- Select Switch.
Important! When you change the authentication method, all users' sessions end. Users must then sign in using the configured authentication method.
