Efecte Secure Access - Customer instructions for User Federation (AD)
Efecte Secure Access - Customer instructions for User Federation (AD)
Use User Federation for Authentication
Efecte Secure Access supports User Federation when authenticating end-users to Efecte Solutions.
User Federation means that, users are able to login to by using AD credentials (username + password) when singing in to Efecte Solutions.
Customer actions:
1. VPN-tunnel between Efecte and Customers AD needs to be build
2. Create Technical user account for Efecte authentication
3. Create certificate for Efecte Solution
4. Grant Read and Authenticate permissions
5. Create needed AD-groups used in authentication (this are usually defined in the projects)
Customer deliverables:
Customer needs to provide needed information for Efecte to be able to configure also Efecte solutions authentication task. These are described and documented in more detailed level, in Customers Efecte AD integration description, provided by ongoing Efecte project.
| Information | Example |
| Technical user name This is send to responsible Efecte consultant via secure mail |
SA_Efecte_Authentication |
| Password This is send to responsible Efecte consultant via secure mail |
Minimum 8 characters |
| Port | 363 |
| IP Address | 10.1.11.1 |
| OU's for user accounts | From which OU (can be several) user accounts are read from AD or which OU's are excluded. |
| OU's for groups | From which OU (can be several) groups are read from AD or which OU's are excluded. |
| Certificate | Certificates needs to be set in place and delivered to responsible Efecte consultant. |