External Authentication Domains
Authentication is crucial when interacting with enterprise applications. If existing domains are already in existence, it makes sense to utilize those, rather than having to recreate them. Using existing external domains for DataSplice is not only beneficial when setting up domains, but it is also very advantageous from a long-term maintenance standpoint. It is much easier to manage one domain than to manually try to keep two of them synchronized.
DataSplice domain. These tasks are discussed in the following users and groups section of this manual. Other external domains, such as Active Directory, MAXIMO®, Oracle, or SQL Server require that the users and groups be added or deleted at the location of the source domain.The ability to utilize existing domains from within DataSplice is controlled in the External Authentication Domains section of the Administration Client. To display this section, select Authentication Domain Settings from the main navigation button.
External Authentication Domains Stored in a Database
It is possible to reference an existing external authentication domain that is stored in a database. This is useful for accessing domains within MAXIMO® 4.x, SQL Server, Oracle, etc.
To create a reference to an existing external authentication domain from a database:
- Select Authentication Domain Settings from the main navigation button.
- This brings up the External Authentication Domains section.
- Click Action > Create Authentication Domain.
- This brings up the Entry Dialog window.
- In the Domain Name field, enter a name used to define this external domain.
- From the Authentication Source drop-down list, select the domain provider schema to use.
- In the Template section, select the pre-defined template that matches your desired domain type.
- Click OK.
- The external domain reference will be created in DataSplice, and additional details will be displayed to the right in the Basic Options area. Complete the fields appropriately. In general, only the Connection Profile field will need to be selected.
Option Name Option Value Connection Profile This is the connection profile being used to obtain database users and groups from. Note: This should be the name of the connection profile as it has been configured in the Database Connection Profiles section of the ADO.NET Data Source Plug-in configuration.Query Database Users SQL statement used to retrieve the list of database users. The default statement assumes that the user name column is aliased to user_nameand the users table is aliased tousers_table.Query Database Groups SQL statement used to retrieve the list of database groups. The default statement assumes that the group name column is aliased to group_nameand the group table is aliased togroups_table.Query Database User-Group Associations SQL statement used to retrieve the list of user-group associations. The default statement assumes that the user name is aliased to user_nameand the group name column is aliased togroup_name. It also assumes that the corresponding users table is aliased tousers_tableand the groups table is aliased togroups_table. - Click the Save Changes button
.
Active Directory Domains
Existing Windows Active Directory domains can be accessed within DataSplice. This functionality is provided by the included Windows authentication plug-in.
To create a reference to an existing Active Directory domain:
- Select Authentication Domain Settings from the main navigation button.
- This brings up the External Authentication Domains section.
- Click Action > Create Authentication Domain.
- This brings up the Entry Dialog window.
- In the Domain Name field, enter a name used to define this external domain.
- From the Authentication Source drop-down list, select
Windows Authentication Plug-in. - In the Template section, select
Default. - Click OK.
- The new external domain will be created, and additional details will be displayed to the right in the Basic Options area. Enter the field values appropriately.
Option Name Option Value User Name A user of the desired Active Directory domain to be used to list the users and groups the domain contains. Note: For the domain setup to function correctly, this user must be a member of the intended domain and have appropriate access to the list of users and groups it contains.Password The associated password for the user specified in the previous field. AD Domain Name The drop-down list of accessible Active Directory domains. This list should be pre-populated with all visible Active Directory domains. - Active Directory properties, such as email, can be assigned to DataSplice attributes. If desired, this behavior is configured in the following Directory Attributes section. Click the Add button to create a new attribute definition entry. In the Attribute Name field, enter the DataSplice attribute to be assigned. In the Property Name field, enter the Active Directory property of interest.
- Click the Save Changes button
.
MAXIMO® 5.x Domains using Integration Plug-in 2.x
Existing MAXIMO® 5.x domains can be accessed within DataSplice. If the MAXIMO® integration plug-in version 2.x is being used, the domain settings can be created in this External Authentication Domains screen. For information regarding the installation and initial configuration of the integration plug-in version 2.x, please refer to the MAXIMO® 5.x integration plug-in 2.x manual.
To create a reference to an existing MAXIMO® 5.x domain when using the integration plug-in version 2.x:
- Select Authentication Domain Settings from the main navigation button.
- This brings up the External Authentication Domains section.
- Click Action > Create Authentication Domain.
- This brings up the Entry Dialog window.
- In the Domain Name field, enter a name used to define this external domain.
- From the Authentication Source drop-down list, select
MAXIMO 5.x Integration Plug-in. - In the Template section, select
Default. - Click OK.
- The new external domain will be created, and additional details will be displayed to the right in the Basic Options area. Enter the field values as desired.
Option Name Option Value User Name A MAXIMO® user with adequate permissions to be able to list the users and groups in the system. Password The associated password for the user specified in the previous field. Host The MAXIMO® server name. Site The MAXIMO® site. - Click the Save Changes button
.
MAXIMO® 5.x/6.x Domains using Integration Plug-in 4.x
Existing MAXIMO® 5.x or 6.x domains can be accessed within DataSplice. If the MAXIMO® integration plug-in version 4.x is being used, the MAXIMO® domain will be created based on the Authentication Domain Name field defined in the basic options section of the MAXIMO® integration plug-in. If this version of the integration plug-in is being used, the domain screen will be read-only. For information regarding the installation and initial configuration of the integration plug-in version 4.x, please refer to the MAXIMO® 5.x/6.x integration plug-in 4.x manual.
To display a MAXIMO® 5.x or 6.x domain when using the integration plug-in version 4.x:
- Select Authentication Domain Settings from the main navigation button.
- This brings up the External Authentication Domains section. Notice the read-only domain entry corresponding to the name given in the Authentication Domain Name field in the basic options section of the MAXIMO® integration plug-in.
If a previous version of the integration plug-in is being used, such as version 2.x, the domain will be created on this screen. Please refer to the previous section for additional information when configuring authentication domains when using the MAXIMO® integration plug-in version 2.x.
Other Types of Domains
Other types of external authentication domains may also be accessed. Extended functionality of this type is provided by specific plug-ins.
Last modified 2006-09-26 10:19 AM