Login, Passwords and Home Dashboard
As a system administrator, you set up the login policy of your company and configure AWI to support the authentication and login approach that you want. You define the criteria that passwords must comply with in the UC_CLIENT_SETTING variable. You also determine when passwords expire, the maximum number of failed login attempts, the default password for new users, and so on. You can also define how the home dashboard looks like for the Users in your system.
Login Data and Passwords
The Automic Web Interface supports different user login options.
Standard Login
When you use the standard AWI login, the authentication process is handled by the Automation Engine, which then confirms if the credentials match the values in the related User (USER) object.
This does not apply to logins through the LDAP connection.
LDAP
The Automation Engine also includes a client that authenticates login data using LDAP (Lightweight Directory Access Protocol) via Microsoft Active Directory or Oracle Directory Server. You can activate the LDAP connection for your system using the LDAP parameter in the UC_SYSTEM_SETTINGS variable. However, the configuration of the User (USER) object defines if the Automation Engine or LDAP handle the authentication.
Single Sign-On
Single sign-on allows users to login only once without having to enter login details over and over again. The Automation Engine supports Kerberos Key Distribution Center (KDC) and the Security Assertion Markup Language 2.0 (SAML 2.0) protocols. .
You enable single sign-on (SSO) in the configuration.properties file of your Automic Web Interface instance by setting the sso.enabled property to true.
You can also decide if you want to enable autologin to use a fully or partially automatic login:
-
Enabling autologin results in a fully automatic login and allows you to bypass entering any login information in the future . Make sure to select your session options (Language, Connection, Client, Session Color) before enabling it.
-
Disabling autologin results in a partially automatic login and allows you to change your session options (Language, Connection, Client, Session Color) without having to enter your user information or password.
You can also enable parametrized login. This means you append the login parameters in the URL that you use to start the Automic Web Interface.
Read the following topics to learn more about the different login options and the user authentication:
- Configuring the Login and User Authentication
- LDAP Connection Setup
- LDAP key
- UC_LDAP_EXAMPLE - LDAP Connection Variable
- Setting up Single Sign-On
- configuration.properties - Configuring Your Local Setup
Read the following topics to learn more about password related issues:
- Password Policies and Management
- UC_CLIENT_SETTINGS - Various Client Settings
- Obfuscating Passwords
- Password Exit
First Login: Home Dashboard
When you log on the first time you see a pre-configured dashboard with videos and useful links to the product documentation. However, as a system administrator, you can define local default versions so that the default dashboard displays elements specific to a user or a team. You can also grant users the necessary rights to see and customize it as they see fit. You use a combination of authorizations, rights and privileges to control the user access to dashboards:
- Authorization and rights to DASH objects
- Authorization and rights to the folders on which the DASH objects are stored
- Authorization and rights to the object types used in the dashboards
Read the following topics to learn more about the default Dashboards, Dashboards in general, and their rights and authorizations: