Differences
This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision Last revision Both sides next revision | ||
devel:documentation:security:dev:authentication [2019/02/27 15:47] kotisovam [Password change & old password] this whole part moved to admin guide section (Password) |
devel:documentation:security:dev:authentication [2020/06/24 06:09] kopro [Actual list of authenticators] change image position |
||
---|---|---|---|
Line 43: | Line 43: | ||
=== DefaultAccAuthenticator === | === DefaultAccAuthenticator === | ||
+ | |||
+ | <note important> | ||
[[https:// | [[https:// | ||
Line 53: | Line 55: | ||
First, the authenticator tries to find an end system with given UUID. If such system doesn' | First, the authenticator tries to find an end system with given UUID. If such system doesn' | ||
+ | |||
{{: | {{: | ||
Line 70: | Line 73: | ||
+ | === DefaultAccMultipleSystemAuthenticator === | ||
+ | |||
+ | Since 10.4.0. | ||
+ | |||
+ | [[https:// | ||
+ | |||
+ | <note tip>All behavior with authentication is same as original **DefaultAccAuthenticator**. The original authenticator is now deprecated. Please use the newer.</ | ||
+ | |||
+ | The end systems are defined with configuration properties. For example: | ||
+ | < | ||
+ | idm.sec.acc.security.auth.order1.system=e6a8b1e7-d656-47ae-aa2d-1062d1583c1a | ||
+ | idm.sec.acc.security.auth.order2.system=ea86a399-9b26-4f75-9b3a-d3f0049031ef | ||
+ | idm.sec.acc.security.auth.order3.system= | ||
+ | idm.sec.acc.security.auth.order4.system= | ||
+ | idm.sec.acc.security.auth.order5.system=SystemAD - User | ||
+ | idm.sec.acc.security.auth.order6.system= | ||
+ | idm.sec.acc.security.auth.order7.system=e6a8b1e7-d656-47ae-aa2d-1062d1583c1a | ||
+ | idm.sec.acc.security.auth.order8.system= | ||
+ | idm.sec.acc.security.auth.order9.system=LDAP User 2 | ||
+ | </ | ||
+ | |||
+ | Authentication is done from lowest order to highest. Maximum order is defined with the configuration property (default count is 50): | ||
+ | < | ||
+ | idm.sec.acc.security.auth.maximumSystemCount=50 | ||
+ | </ | ||
+ | |||
+ | Configuration property can be null or empty. **These configurations will be skipped**. |