Directory services like AD or LDAP can provide facility to mange users and roles. It can work as centralized repository for user management. System administrators can easily manage users and roles from central system and link various applications across the organization to this system.
Smarten provides integration with directory services like AD/LDAP. In this authentication mode, administrators can configure directory service connection parameters and smarten will authenticate users by passing user credentials to AD server. Smarten doesn’t store user passwords. It synchronizes user and role names for mapping its own access rights and permissions management. Smarten can synchronize the users and roles from AD automatically as per the frequency set (1 hour, 8 hours, etc.).
When users enter their credentials to login to Smarten, they will be directly authenticated to AD server. If AD server authenticates credentials, user will be allowed to enter in Smarten application and they will be able to access application features according to permissions assigned to their roles.
AD Configuration in Smarten:
As shown in below screen, administrator can configure AD connection parameters in Smarten.
SMARTEN AD CONFIGURATION
1. Role Management
Once AD configuration is done, Smarten will sync these roles from AD server. For example, in the active directory, two roles have been configured – Sales manager and Sales executive). If role is added or removed in AD server, it will be reflected here as shown below.
Once these roles are inherited to Smarten, Administrator can configure access rights and permissions for a role as shown below.
SMARTEN EDIT ROLE
2. Smarten User management
Users will be fetched from AD server for access rights and permissions. Smarten stores only usernames for access rights mapping. If users are added or removed in AD server, it will be reflected here. The user – role mapping from AD will also be inherited automatically. I.e.; if bi1 user is mapped to Sales manager role, this mapping will also be taken without assigning them manually.
SMARTEN USER MANAGEMENT