This section describes the different authentication mechanisms of ADOIT. The authentication mechanisms can be used separately or in combination. Depending on the used authentication mechanisms, further installation-specific configuration steps may be necessary. Please consult your ADOIT consultant for further information.
| Standard ADOIT users | - ADOIT users are created in the ADOIT Administration.
- Login to ADOIT requires input of username and password. These credentials are used to authenticate the user against the available data in the ADOIT database.
- The assignment of user attributes, rights and system roles is controlled in the ADOIT Administration.
|
| LDAP Authentication | - Users can either be imported from a directory service or mapped to ADOIT users.
- Login to ADOIT requires input of username and password. The provided credentials will be used to authenticate the user against the configured directory service.
- A precondition for this scenario is that the connection of ADOIT to the directory service in use (e.g. Active Directory) is established in the ADOIT Administration.
- The assignment of user attributes, rights and system roles may be controlled in the ADOIT Administration or synchronised with an external directory service.
- Specific configuration steps are necessary when setting up ADOIT for this authentication mechanism. Please consult your ADOIT consultant for further information about this authentication mechanism.
|
| IDM Authentication | - Users can either be imported from an external user management system or mapped to ADOIT users.
- Login to ADOIT via single sign-on is possible using an Identity Management System (IDM)
- A precondition for this scenario is the connection of ADOIT to an authentication server in the target environment which provides means for authentication with an external user management system (e.g. Microsoft Internet Information Services connected to an Active Directory).
- The assignment of user attributes, rights and system roles may be controlled in the ADOIT Administration or synchronised with an external user management system.
- Specific configuration steps are necessary when setting up ADOIT for this authentication mechanism. Please consult your ADOIT consultant for further information about this authentication mechanism.
|
| SAML Authentication | - Users can either be imported from an external user management system or mapped to ADOIT users.
- The external user management system must provide an Identity Provider (IdP) for SAML 2.0 (e.g. Active Directory Federation Services [AD FS] or Shibboleth).
- To log on to ADOIT, the user is redirected to the IdP. Depending on the configuration of the IdP, the authentication is carried out via single sign-on or by entering access data (username and password, certificates, etc.).
- No server-to-server communication is necessary for this authentication mechanism, since all data is transmitted via the browser.
- The assignment of user attributes, rights and system roles may be controlled in the ADOIT Administration or synchronised with an external user management system.
- Specific configuration steps are necessary when setting up ADOIT for this authentication mechanism. Please consult your ADOIT consultant for further information about this authentication mechanism.
|
| OIDC Authentication | - Users can either be imported from an external user management system or mapped to ADOIT users.
- A precondition for using OpenID Connect (OIDC) is the connection of ADOIT to an OpenID Connect provider (OP) that verifies the identity of the user as well as provides basic profile information about the user.
- To log on to ADOIT, the user is redirected to the OP. Login to ADOIT via single sign-on is possible using OIDC authentication.
- The assignment of user attributes, rights and system roles may be controlled in the ADOIT Administration or synchronised with an external user management system.
- Specific configuration steps are necessary when setting up ADOIT for this authentication mechanism. Please consult your ADOIT consultant for further information about this authentication mechanism.
|
This table contains a summary of the features of the different authentication mechanisms.
