LDAP/AD Authentication - Revision history

Ollvihe at 15:08, 10 February 2024

2024-02-10T15:08:06Z

← Older revision		Revision as of 15:08, 10 February 2024
Line 1:		Line 1:
	~~QPR ProcessAnalyzer has the following methods for authenticating users:~~		== Overview ==
	* '''Built-in authentication''' in which users are authenticated using the username and password in stored in the QPR ProcessAnalyzer database (using the [[Manage_Users_and_Groups\|Manage Users]] dialog).
	* '''LDAP/AD authentication''' (Lightweight Directory Access Protocol/Active Directory) ~~in which~~ users are authenticated by validating the username against an external LDAP/AD server. Note that user accounts with corresponding names need to be created to the QPR ProcessAnalyzer database before user can login (using the [[Manage_Users_and_Groups\|Manage Users]] dialog).		Lightweight Directory Access Protocol/Active Directory (LDAP) is a method where users are authenticated by validating the username against an external LDAP/AD server. Note that user accounts with corresponding names need to be created to the QPR ProcessAnalyzer database before user can login (using the [[Manage_Users_and_Groups\|Manage Users]] dialog). Also the combination of the built-in and the LDAP authentication can be used. It works in a way that if the LDAP method fails, the built-in method is used.
	* Combination of the built-in and the LDAP authentication, in ~~which,~~ if the LDAP method fails, the built-in method is used.

	== Configuring Authentication Settings ==		== Configuring Authentication Settings ==

Ollvihe: /* Configuring Authentication Settings */

2022-12-07T15:38:15Z

Configuring Authentication Settings

← Older revision		Revision as of 15:38, 7 December 2022
Line 19:		Line 19:
	\|-		\|-
	\|LDAPUserFilter		\|LDAPUserFilter
	\|\|Additional LDAP filter expression for the query to find the user. For example '''(&(objectclass=person))'''. Note that some special characters in literals need to be escaped ~~in the filter expression~~ (more information: https://ldapwiki.com/wiki/DN%20Escape%20Values).		\|\|Additional LDAP filter expression for the query to find the user. For example '''(&(objectclass=person))'''. Note that some special characters in literals of the filter expression need to be escaped (more information: https://ldapwiki.com/wiki/DN%20Escape%20Values).
	\|-		\|-
	\|LDAPUserSearchBase		\|LDAPUserSearchBase

Ollvihe: /* Configuring Authentication Settings */

2022-12-07T15:37:25Z

Configuring Authentication Settings

← Older revision		Revision as of 15:37, 7 December 2022
Line 19:		Line 19:
	\|-		\|-
	\|LDAPUserFilter		\|LDAPUserFilter
	\|\|~~This string is used by~~ the ~~LDAP library~~ to ~~locate and search~~ the user ~~from corporate LDAP server~~. For example '''(&(objectclass=person))'''		\|\|Additional LDAP filter expression for the query to find the user. For example '''(&(objectclass=person))'''. Note that some special characters in literals need to be escaped in the filter expression (more information: https://ldapwiki.com/wiki/DN%20Escape%20Values).
	\|-		\|-
	\|LDAPUserSearchBase		\|LDAPUserSearchBase
	\|\|Distinguished name of the object at which to start the search. For example '''dc=local'''		\|\|Distinguished name of the object at which to start the search. For example '''dc=local'''. Note that some special characters in the distinguished names need to be escaped (more information: https://ldapwiki.com/wiki/DN%20Escape%20Values).
	\|-		\|-
	\|LDAPUserIdAttributeName		\|LDAPUserIdAttributeName

Ollvihe at 19:28, 11 December 2021

2021-12-11T19:28:28Z

Ollvihe at 22:18, 22 June 2021

2021-06-22T22:18:36Z

← Older revision		Revision as of 22:18, 22 June 2021
Line 3:		Line 3:
	* '''LDAP/AD authentication''' (Lightweight Directory Access Protocol/Active Directory) in which users are authenticated by validating the username against an external LDAP/AD server. Note that user accounts with corresponding names need to be created to the QPR ProcessAnalyzer database before user can login (using the [[Manage_Users_and_Groups_in_QPR_ProcessAnalyzer\|Manage Users]] dialog).		* '''LDAP/AD authentication''' (Lightweight Directory Access Protocol/Active Directory) in which users are authenticated by validating the username against an external LDAP/AD server. Note that user accounts with corresponding names need to be created to the QPR ProcessAnalyzer database before user can login (using the [[Manage_Users_and_Groups_in_QPR_ProcessAnalyzer\|Manage Users]] dialog).
	* Combination of the built-in and the LDAP authentication, in which, if the LDAP method fails, the built-in method is used.		* Combination of the built-in and the LDAP authentication, in which, if the LDAP method fails, the built-in method is used.

	~~In addition, it is possible to use [[Common QPR Authentication\|common QPR authentication]] between different QPR products.~~

	== Configuring Authentication Settings ==		== Configuring Authentication Settings ==
Line 52:		Line 50:

	2. Log in to QPR ProcessAnalyzer as a user that has '''All''' and '''Administrator''' rights.<br>		2. Log in to QPR ProcessAnalyzer as a user that has '''All''' and '''Administrator''' rights.<br>
	3. Create a new user account in the [[~~Manage Users in QPR ProcessAnalyzer Excel Client~~\|Manage Users]] dialog. The username in QPR ProcessAnalyzer must match the LDAP username.<br>		3. Create a new user account in the [[Manage_Users_and_Groups_in_QPR_ProcessAnalyzer\|Manage Users]] dialog. The username in QPR ProcessAnalyzer must match the LDAP username.<br>
	4. To allow users to authenticate using the LDAP method, change the value of '''AuthenticationMethod''' in '''PA_CONFIGURATION''' table to either '''2''' (to allow only LDAP authentication) or '''3''' (to allow also built-in authentication in case the LDAP authentication fails).		4. To allow users to authenticate using the LDAP method, change the value of '''AuthenticationMethod''' in '''PA_CONFIGURATION''' table to either '''2''' (to allow only LDAP authentication) or '''3''' (to allow also built-in authentication in case the LDAP authentication fails).

	Note that if the user (other than an Administrator) has successfully been authenticated using the LDAP method, this user is not able to change his or her own password in QPR ProcessAnalyzer.		Note that if the user (other than an Administrator) has successfully been authenticated using the LDAP method, this user is not able to change his or her own password in QPR ProcessAnalyzer.

Ollvihe: Ollvihe moved page LDAP/AD Authentication in QPR ProcessAnalyzer Server to LDAP/AD Authentication without leaving a redirect

2021-06-22T22:12:29Z

Ollvihe moved page LDAP/AD Authentication in QPR ProcessAnalyzer Server to LDAP/AD Authentication without leaving a redirect

← Older revision	Revision as of 22:12, 22 June 2021
(No difference)

Ollvihe at 16:44, 22 June 2021

2021-06-22T16:44:23Z

← Older revision		Revision as of 16:44, 22 June 2021
Line 1:		Line 1:
	QPR ProcessAnalyzer has the following methods for authenticating users:		QPR ProcessAnalyzer has the following methods for authenticating users:
	* '''Built-in authentication''' in which users are authenticated using the username and password in stored in the QPR ProcessAnalyzer database (using the [[~~Manage Users in QPR ProcessAnalyzer Excel Client~~\|Manage Users]] dialog).		* '''Built-in authentication''' in which users are authenticated using the username and password in stored in the QPR ProcessAnalyzer database (using the [[Manage_Users_and_Groups_in_QPR_ProcessAnalyzer\|Manage Users]] dialog).
	* '''LDAP/AD authentication''' (Lightweight Directory Access Protocol/Active Directory) in which users are authenticated by validating the username against an external LDAP/AD server. Note that user accounts with corresponding names need to be created to the QPR ProcessAnalyzer database before user can login (using the [[~~Manage Users in QPR ProcessAnalyzer Excel Client~~\|Manage Users]] dialog).		* '''LDAP/AD authentication''' (Lightweight Directory Access Protocol/Active Directory) in which users are authenticated by validating the username against an external LDAP/AD server. Note that user accounts with corresponding names need to be created to the QPR ProcessAnalyzer database before user can login (using the [[Manage_Users_and_Groups_in_QPR_ProcessAnalyzer\|Manage Users]] dialog).
	* Combination of the built-in and the LDAP authentication, in which, if the LDAP method fails, the built-in method is used.		* Combination of the built-in and the LDAP authentication, in which, if the LDAP method fails, the built-in method is used.

Ollvihe at 14:59, 15 January 2020

2020-01-15T14:59:10Z

← Older revision		Revision as of 14:59, 15 January 2020
Line 35:		Line 35:
	\|\|Password of the user to login to the AD/LDAP server.		\|\|Password of the user to login to the AD/LDAP server.
	\|}		\|}

	~~The authentication method that is currently used is shown in [[Get Started with QPR ProcessAnalyzer Excel Client\|Session Information dialog]].~~

	== Creating Users for LDAP Authentication==		== Creating Users for LDAP Authentication==

Ollvihe at 21:48, 24 November 2018

2018-11-24T21:48:44Z

← Older revision		Revision as of 21:48, 24 November 2018
Line 4:		Line 4:
	* Combination of the built-in and the LDAP authentication, in which, if the LDAP method fails, the built-in method is used.		* Combination of the built-in and the LDAP authentication, in which, if the LDAP method fails, the built-in method is used.

	In addition, it is possible to use [[Common QPR Authentication\|common QPR authentication]] between different QPR ~~product web clients~~.		In addition, it is possible to use [[Common QPR Authentication\|common QPR authentication]] between different QPR products.

	== Configuring Authentication Settings ==		== Configuring Authentication Settings ==

Ollvihe: /* Configuring Authentication Settings */

2018-11-24T21:48:19Z

Configuring Authentication Settings

← Older revision		Revision as of 21:48, 24 November 2018
Line 14:		Line 14:
	\|AuthenticationMethod \|\|Indicates which authentication method is used. Options:		\|AuthenticationMethod \|\|Indicates which authentication method is used. Options:
	*'''1''': Users are authenticated using the passwords in QPR ProcessAnalyzer database (Built-in authentication). Default value.		*'''1''': Users are authenticated using the passwords in QPR ProcessAnalyzer database (Built-in authentication). Default value.
	*'''2''': Users are authenticated using the LDAP method by validating the username against ~~a corporate~~ LDAP server.		*'''2''': Users are authenticated using the LDAP method by validating the username against the LDAP server.
	*'''3''': Users are authenticated using both methods: if LDAP authentication fails, then logging in will be done using the built-in authentication method.		*'''3''': Users are authenticated using both methods: if LDAP authentication fails, then logging in will be done using the built-in authentication method.
	\|-		\|-

← Older revision		Revision as of 19:28, 11 December 2021
Line 1:		Line 1:
	QPR ProcessAnalyzer has the following methods for authenticating users:		QPR ProcessAnalyzer has the following methods for authenticating users:
	* '''Built-in authentication''' in which users are authenticated using the username and password in stored in the QPR ProcessAnalyzer database (using the [[~~Manage_Users_and_Groups_in_QPR_ProcessAnalyzer~~\|Manage Users]] dialog).		* '''Built-in authentication''' in which users are authenticated using the username and password in stored in the QPR ProcessAnalyzer database (using the [[Manage_Users_and_Groups\|Manage Users]] dialog).
	* '''LDAP/AD authentication''' (Lightweight Directory Access Protocol/Active Directory) in which users are authenticated by validating the username against an external LDAP/AD server. Note that user accounts with corresponding names need to be created to the QPR ProcessAnalyzer database before user can login (using the [[~~Manage_Users_and_Groups_in_QPR_ProcessAnalyzer~~\|Manage Users]] dialog).		* '''LDAP/AD authentication''' (Lightweight Directory Access Protocol/Active Directory) in which users are authenticated by validating the username against an external LDAP/AD server. Note that user accounts with corresponding names need to be created to the QPR ProcessAnalyzer database before user can login (using the [[Manage_Users_and_Groups\|Manage Users]] dialog).
	* Combination of the built-in and the LDAP authentication, in which, if the LDAP method fails, the built-in method is used.		* Combination of the built-in and the LDAP authentication, in which, if the LDAP method fails, the built-in method is used.

	== Configuring Authentication Settings ==		== Configuring Authentication Settings ==
	Authentication related settings are configured in the [[~~PA_Configuration_database_table_in_QPR_ProcessAnalyzer~~\|PA_CONFIGURATION]] table in the QPR ProcessAnalyzer database. The settings are as follows:		Authentication related settings are configured in the [[PA_Configuration_database_table\|PA_CONFIGURATION]] table in the QPR ProcessAnalyzer database. The settings are as follows:
	{\| class="wikitable" style="text-align: left"		{\| class="wikitable" style="text-align: left"
	!Name		!Name
Line 50:		Line 50:

	2. Log in to QPR ProcessAnalyzer as a user that has '''All''' and '''Administrator''' rights.<br>		2. Log in to QPR ProcessAnalyzer as a user that has '''All''' and '''Administrator''' rights.<br>
	3. Create a new user account in the [[~~Manage_Users_and_Groups_in_QPR_ProcessAnalyzer~~\|Manage Users]] dialog. The username in QPR ProcessAnalyzer must match the LDAP username.<br>		3. Create a new user account in the [[Manage_Users_and_Groups\|Manage Users]] dialog. The username in QPR ProcessAnalyzer must match the LDAP username.<br>
	4. To allow users to authenticate using the LDAP method, change the value of '''AuthenticationMethod''' in '''PA_CONFIGURATION''' table to either '''2''' (to allow only LDAP authentication) or '''3''' (to allow also built-in authentication in case the LDAP authentication fails).		4. To allow users to authenticate using the LDAP method, change the value of '''AuthenticationMethod''' in '''PA_CONFIGURATION''' table to either '''2''' (to allow only LDAP authentication) or '''3''' (to allow also built-in authentication in case the LDAP authentication fails).

	Note that if the user (other than an Administrator) has successfully been authenticated using the LDAP method, this user is not able to change his or her own password in QPR ProcessAnalyzer.		Note that if the user (other than an Administrator) has successfully been authenticated using the LDAP method, this user is not able to change his or her own password in QPR ProcessAnalyzer.