Domains

{"URL":["/aai/web/v2/settings/usermgmt/domains"],"heroDescriptionIdentifier":"ice_description_domains_intro","customCards":[{"id":"ice_domains_types","title":"Types of Domains","type":"customize"},{"id":"ice_domains_working_with_the_list","title":"Working with the Domains List","type":"customize"},{"id":"ice_domains_adding","title":"Adding a Domain","type":"customize"},{"id":"ice_domains_editing","title":"Editing a Domain","type":"customize"},{"id":"ice_domains_delete","title":"Deleting a Domain","type":"customize"},{"id":"ice_description_Working_w_Tables","title":"Working with Tables","type":"customize","url":"https://docs.automic.com/documentation/webhelp/english/ALL/components/TERMA_DOCU/*.*/AAI%20Guides/Content/_Common/CommonFunctions/CF_Working_with_Tables.htm"},{"id":"ice_users_see_also","title":"See Also","type":"customize"}]}

Domains control the user login, authentication method and access privileges to AAI's functions. Depending on the domain, the user definition (role and access privileges) is handed over to AAI by the domain itself or you have to assign the individual users a specific role manually. As an AAI administrator, you manage domains on the Domains tab of the User Management page. You also determine which domains will be available for the users to log in to AAI.

Notes:

  • After installing AAI you have a built-in security domain called JAWS.

    JAWS has a predefined administration user that has full access to features, functions and user interface areas. This user is meant to setup AAI and make it functional only, not as regular AAI user. Its credentials are:

    • User name: admin
    • Password: password

  • This product documentation presents information about AAI features and tasks as they relate to the roles AAI users play in your organization (AAI administrators, business area coordinators, jobstream administrators and so forth). You should not confuse those user roles with the User Administration user roles mentioned here.

This page includes the following:

Types of Domains

Automic Automation Intelligence supports the following types of domains:

  • JAWS

    This is AAI's native domain and it is available by default after a fresh installation. This domain provides basic user access management. For more information, see Configuring the JAWS Domain.

  • LDAP

    If your company uses LDAP for directory services authentication, you can integrate LDAP with AAI. Any user who is defined and has an ID and a password in the LDAP domain can log in to AAI. This domain provides basic user access management. For more information, see Configuring the LDAP Domain.

  • eEM

    If you use eEM for access policy management, authentication, and authorization services, you can integrate eEM with AAI. This integration provides a granular role-based authentication and data access control with very specific roles and privileges.

    For more information, see:

  • Kerberos

    If your company uses Kerberos to authenticate service requests, you can integrate Kerberos and AAI for single sign-on. For more information, see Configuring the Kerberos Domain.

The domains that you create are displayed and available for selection in the Domains dropdown list on the AAI Login page. The users must select the appropriate domain to log in.

Working with the Domains List

The Domains list shows the domains to which you have at least read-only access to. Depending on the domain that you have logged in with, the list can be restricted:

  • Users who log in with eEM

    Only the domains to which you have access.

  • Other users

    All the domains in AAI. Administrator users can add, edit and delete domains. Application users have read-access only.

You add, modify and delete domains from this list.

Defining Default Domains

The default domain is the domain that is preselected on the log in page when a users logs in. The first domain in the list is the default domain.

After installing AAI, when you log in for the first time, JAWS is the default domain. You can change the default once you have added more domains.

To set a domain as default, drag it from its current position and drop it into position 1 in the list.

Hiding/Showing Domains

Visible domains are displayed in the Domains dropdown list on AAI's login page and users can select one of them to log in. Hidden domains are not available in this dropdown list and, therefore, users will not be able to select them to log in to AAI. There must always be a domain in the Visible area of the Domains list.

Typically, you may want to hide the JAWS domain to force users to log in using one of the other domains.

To hide or show a domain, drag it from the Visible area and drop it in the Hidden area.

Sorting the Domains Order

The order of the domains in the list corresponds to the order of the domains in the dropdown list on the login page. To change the sort order of the domains, drag and drop them to the desired position in the list.

Adding a Domain

  1. Go to the Admin - Users page.

  2. Open the Domains tab and select Add Domain.

  3. On the Add Domain dialog, enter the following:

    Name

    This is the name that the users will see on the login page when they log in to AAI. It must be unique. Once created, the name of the domain cannot be edited.

    Type

    One of the domain types supported by AAI.

  4. The dialog is automatically expanded and shows the configuration options for the selected domain. For details about those options, please click the corresponding link at the bottom of this page.

Editing a Domain

The domain names on the list are links to the respective domain definition.

  1. Click the name of the domain that you want to edit.

  2. On the Edit Domain dialog, make your changes.

  3. Click Save.

Notes:

  • The domain Name and Type are not editable for any domain.

  • The JAWS domains is not editable.

Deleting a Domain

  1. Click on the domain name in the list.

  2. On the Edit Domain dialog, click Delete Domain.

    If there are users assigned to the domain, AAI shows an error message and you cannot delete it.