By default, credentials are managed via the local authentication mechanism provided for ProVision.
Depending on the authentication method chosen by your organization, there may be a separate authentication to login or logout of the application via the drop down menu.
Four non-local authentication types are available for ProVision: Radius, LDAP, SAML, and DUO Mobile. Settings for these authentication types may be entered from the "Authentication" sub-tab at the top of the Admin Settings page.
Authentication Settings
Authentication settings are accessed by clicking the "Authentication" sub-tab at the top of the Admin Settings page.
In this area, you may set the max session idle time, as well as setup additional authentication options. Four non-local authentication types are available for ProVision: Radius, LDAP, SAML, and DUO Mobile.
For general authentication settings and options, see the settings below.
General Settings
Maximum Session Idle: This setting (minutes) controls how long a session can stay idle before being forced to log in again.
Remote Authentication Tester
The Remote Authentication Tester checks Radius / LDAP settings for a user.
Select the Login Method (Radius or LDAP), enter the Username and Password for the user, and then click "Test Login".
Login Method: Select Radius or LDAP, according to your authentication settings.
Username: The username for the user you are testing.
Password: Password for the user you are testing.
Authentication Options
Four authentication types are available for ProVision: Radius, LDAP, SAML, and DUO Mobile.
To view settings for each, select the authentication type from the list at the left of the module.
For details on each authentication type, see the option-specific pages later in this section.
Login
To login, go to your instance's url and select the authentication type (the default is 'Local'), and enter in the user credentials.
Depending on the authentication method chosen by your organization, there may be a separate authentication to login or logout of the application via the drop down menu.
Change Order of Login Menu Dropdown
The drop down menu defaults to "local" - if you are using another authentication method, you can use the following to change the default ordering and improve usability.
In the file data/globals.php, add a line:
define('DEFAULT_LOGIN_TYPE', 'ldap');
Acceptable values instead of 'ldap' are 'local', 'radius' and 'saml'.
Additional Information
Detailed information on specific authentication types is available on the following pages: