Authentication
Purpose of the plugin
The Authentication section offers all administration options for users, groups and roles.
The system-wide password policy is also regulated here. This allows you to define how users can log into the system in accordance with the security regulations.
Another component of the authentication configuration is the insight into the configured authentication methods and other settings that are stored in Keycloak.
Possible usage of the plugin
The configured authentication settings can be used in:
-
Login (Login-mask and registration)
-
User settings (Multi-factor authentication and tokens)
-
User-Management Page Plugin
Preconditions
The configuration of authentication services and methods needs to be done in Keycloak. Keycloak is an open source identity and access management, which allows a detailed configuration of Identity providers for example, such as Microsoft Azure.
General configuration
The configuration of authentication includes the following parts:
| Tab name | Description | Note |
|---|---|---|
Users |
On this page the user can configure OMN users and also see users, which have been configured in Keycloak and are used within OMN. |
See more details "Users" |
Groups |
On this page the user can configure internal groups for OMN users and external users. |
See more details "Groups" |
Roles |
On this page the user can configure roles, which are a set of users and groups. Roles can be provided with security permissions in the configuration. |
See more details "Roles" |
Password policy |
On this page the user can configure the password policy, which should be applied to all OMN users. |
See more details "Password policy" |
Authentication methods |
On this page the user can see which authentication methods are supported in the OMN system. |
see more details "Authentication methods" |
Keycloak settings |
On this page the user can see if multi-factor authentication is activated and which multi-factor are supported in the OMN system. |
see more details "Keycloak settings" |
Further links and information
Information regarding the configuration within keycloak can be found here.