Summary of Configuration Settings Relating to External Authentication

Use the tables below to determine the database items and configuration settings that you should use to enable log on to Geo SCADA Expert according to the required external authentication criteria.

The Example Configuration section contains several worked examples. Where an example relates to a particular setting that is listed in the table below, the check mark (✓) provides a link to the relevant example.

Key:

✓ indicates the particular properties that you have to configure for a requirement

✘ indicates a check box that should be left clear, or a field that should be left empty (to disable the feature or option)

(Be aware that in some cases, disabling an option might result in other related fields being unavailable for use, or being hidden from display. For example, if the ‘Enabled’ check box is left clear in the External Authentication section of the Server Configuration tool, other external authentication related properties will be unavailable for use in that section of the tool, and will either be unavailable for use or omitted from User Forms and User Group Forms).

O indicates a setting that is optional - you can enable or disable the feature, depending on your external authentication requirements.

Requirement:

1. No external authentication required. User account management is handled directly in Geo SCADA Expert and is completely independent of any Windows domain or LDAP user accounts.
2. Enable external authentication, so that the server verifies any attempts to log on to Geo SCADA Expert against the credentials of a valid Windows domain or LDAP user account.

   Restrict users so that they have to log on to Geo SCADA Expert using a Geo SCADA Expert user name (rather than a Windows domain group or LDAP user name).

3. Enable external authentication, so that the server verifies any attempts to log on to Geo SCADA Expert against the credentials of a valid Windows domain or LDAP user account.

   Allow users to log on to Geo SCADA Expert using their Windows domain group or LDAP user name, instead of their Geo SCADA Expert user name. A corresponding valid and enabled User account has to exist in Geo SCADA Expert unless the system is configured to Create users automatically from group membership (see below).

4. Enable external authentication, so that the server verifies any attempts to log on to Geo SCADA Expert against the credentials of a valid Windows domain or LDAP user account.

   In addition to requirement 2 or 3 above, allow Geo SCADA Expert to maintain a User’s User Group membership automatically. Whenever a user logs on to Geo SCADA Expert, their User Group membership is updated automatically, to align with the user group membership of that User account’s corresponding Windows domain or LDAP user account. To enable this, equivalent User Groups have to exist in the database to match the Windows domain groups or LDAP user groups of which the user is a member.

5. Enable external authentication, so that the server verifies any attempts to log on to Geo SCADA Expert against the credentials of a valid Windows domain or LDAP user account.

   In addition to requirement 4 above, allow Geo SCADA Expert to create a User account automatically if a logon attempt is made for which no User account exists in the database, but the logon credentials match those of a valid Windows domain or LDAP user account.

* Clear the ‘User External Authentication’ check box on User Forms of User accounts that are not associated with a Windows domain or LDAP user account. With such user accounts, you can only disable, enable, or change the password settings of, the User account from within Geo SCADA Expert.

If you select the ‘Use External Authentication’ check box on a User Form, but leave the ‘Windows/LDAP User Name’ field empty, Geo SCADA Expert will only be able to authenticate those user credentials against a Windows domain or LDAP user account for which the user name exactly matches that of the Geo SCADA Expert User account. (If your system is configured to Create users automatically from group membership, Geo SCADA Expert will populate these fields automatically on any User accounts that it creates as part of the external authentication process.)

** Clear the ‘Enabled’ check box in the ‘Link to Windows/LDAP Group’ section on the Forms of any User Groups that are not associated with a Windows domain group or LDAP user group. Geo SCADA Expert will not update the membership of such User Groups automatically (you have to manage such User Groups manually, directly in Geo SCADA Expert).