Procedure
1.
From the
Administration
tab, select
Users and Permissions
.
2.
Select the
Users
folder, then select one or more users for which you want to change the
authentication method, or click
Add User
to create a new account.
NOTE:
When creating a new account, only the
User ID
is required for external authentication, and
must match a user ID on the external authentication server. For a local (internal) account, both a
User
ID
and
Password
are required. When external authentication is available, new user accounts created
without a password value are automatically configured to use external authentication (for example,
LDAP is selected for you). Fill in the fields as needed, and click
OK
to create the user account.
If you are completing an external authentication in a multiple-domain configuration or by using realms,
specify a user ID that includes the domain name or realm name for the
User ID
. Example:
user-
name@domain-name
or
realm-name
.
When you log on, also specify your user ID in this format.
3.
If you are selecting existing users, click
Change Auth
. A dialog box appears. From the drop-down list,
select the required authentication method (for example, LDAP) and click
OK
.
4.
Review the
Authentication
column to verify the authentication method.
On the next logon attempt by each user, the user's logon credentials (user ID and password) are
validated by using the external authentication server.
More information
Creating a user account on page 63
Configuring external authentication for groups on page 66
Configuring external authentication for groups
You can use external authentication systems, such as LDAP (for example, Active Directory), RADIUS, or
Kerberos to authenticate XP7 Command View Advanced Edition user group members as they log on. You
can configure one or more user groups, from one or more external authentication servers.
When linking with an external authentication server, if using together with Active Directory as an external
authorization server, you can manage user permissions by using the Active Directory groups
(authorization groups) registered on the external authorization server. In this case, user permissions are
specified for each group.
Prerequisites
• The Automation Director server must be linked to an external authentication (authorization) server.
See the
HPE XP7 Command View Advanced Edition Administrator Guide
.
• The Automation Director server must be configured to support group authentication, which activates
the
Groups
folder in the UI.
• The Automation Director user group must exist on the external authentication (authorization) server. It
is recommended that the required domain and group information be acquired from the external
authentication server administrator.
66
Configuring external authentication for groups
