Authentication

Authentication

Only a system administrator can configure authentication and identity provider settings.

Configuring an identity provider

JackDB supports two major forms of identity providers for authentication: built-in authentication and LDAP-based authentication.

• Built-in authentication

  When using the built-in identity provider, usernames and passwords are maintained within JackDB.

• LDAP-based authentication

  Using an LDAP identity provider allows users in JackDB to be authenticated via their existing user accounts managed externally.

  A user must already exist in JackDB to be able to log in. An LDAP identity provider is only used to authenticate the user by validating their password.

Two-factor authentication

Two-factor authentication adds an extra layer of security by allowing users to enter a temporary one-time passcode (TOTP) in addition to their username and password when they log in.

An administrator can choose to enable or disable two-factor authentication. Also, if two-factor authentication is enabled, administrators can choose to make this method mandatory (or optional) for JackDB users.