LDAP/AD Authentication: Difference between revisions

From QPR ProcessAnalyzer Wiki
Jump to navigation Jump to search
(306160)
No edit summary
Line 1: Line 1:
QPR ProcessAnalyzer uses two methods for authenticating users:
QPR ProcessAnalyzer uses two methods for authenticating users:
*the built-in authentication method in which the user is authenticated against the passwords in QPR ProcessAnalyzer database
*the built-in authentication method in which the user is authenticated against the user id/password combination in QPR ProcessAnalyzer database
*the LDAP (Lightweight Directory Access Protocol) authentication method in which the user is authenticated by validating the username against a corporate LDAP server
*the LDAP (Lightweight Directory Access Protocol) authentication method in which the user is authenticated by validating the username against a corporate LDAP server


== Configuring the Authentication Settings ==
== Configuring the Authentication Settings ==


The authentication method options can be configured in the PA_CONFIGURATION table in the QPR ProcessAnalyzer database. The relevant options are listed in the following table:
The authentication method options can be configured in the PA_CONFIGURATION table in the QPR ProcessAnalyzer database. The options relevant for authentication are listed in the following table:
<!-- Begin nested table -->
<!-- Begin nested table -->
{|  
{|  
Line 13: Line 13:
|-
|-
|AuthenticationMethod ||Indicates which authentication method is used.
|AuthenticationMethod ||Indicates which authentication method is used.
||*1 = The user is authenticated against the passwords in QPR ProcessAnalyzer database.<br>
||
*1 = The user is authenticated against the passwords in QPR ProcessAnalyzer database.<br>
*2 = The user is authenticated using the LDAP method by validating the username against a corporate LDAP server.<br>
*2 = The user is authenticated using the LDAP method by validating the username against a corporate LDAP server.<br>
*3 = The user is authenticated using both methods: if LDAP authentication fails, then logging in will be done using the built-in authentication method.
*3 = The user is authenticated using both methods: if LDAP authentication fails, then logging in will be done using the built-in authentication method.
Line 45: Line 46:


|}
|}
All values except for AuthenticationMethod should be empty by default.
|} <!-- End nested table -->
|} <!-- End nested table -->

Revision as of 12:48, 28 October 2014

QPR ProcessAnalyzer uses two methods for authenticating users:

  • the built-in authentication method in which the user is authenticated against the user id/password combination in QPR ProcessAnalyzer database
  • the LDAP (Lightweight Directory Access Protocol) authentication method in which the user is authenticated by validating the username against a corporate LDAP server

Configuring the Authentication Settings

The authentication method options can be configured in the PA_CONFIGURATION table in the QPR ProcessAnalyzer database. The options relevant for authentication are listed in the following table:

Name Description Value
AuthenticationMethod Indicates which authentication method is used.
  • 1 = The user is authenticated against the passwords in QPR ProcessAnalyzer database.
  • 2 = The user is authenticated using the LDAP method by validating the username against a corporate LDAP server.
  • 3 = The user is authenticated using both methods: if LDAP authentication fails, then logging in will be done using the built-in authentication method.
LDAPConnectionString The IP address of the LDAP server.
LDAPUserFilter This string is used by the LDAP library to locate and search the user from corporate LDAP server.
LDAPUserSearchBase The distinguished name of the object at which to start the search.
LDAPUserIdAttributeName The user id attribute name.
LDAPServerUserName The distinguished name of the user.
LDAPServerPassword The password of the user.


All values except for AuthenticationMethod should be empty by default.