Standard Authentication

Legacy Authentication Methods

Platform: OnBase
Product: Legacy Authentication Methods
Release: Foundation 23.1
License: Premier; Standard; Essential

Documentation Notice
General Information and Requirements
Overview
Authentication Methods
Internal Security
Active Directory Enhanced
Active Directory Federation Services (AD FS)
Hyland Identity Provider (IdP) Server
LDAP Security
Integration for Single Sign-On
Single Sign-On for PeopleSoft Enterprise
Licensing
Simplified Licensing
Legacy Licensing
Requirements
Active Directory and LDAP Authentication
Extended Character Sets
LDAP Directory Service
Active Directory Federation Services (AD FS)
Integration for Single Sign-On
Single Sign-On for PeopleSoft Enterprise
Upgrade Considerations
Standard Authentication
Active Directory Federation Services (AD FS)
Integration for Single Sign-On
Single Sign-On for PeopleSoft Enterprise
Contacting Support
Standard Authentication
Configuring Standard Authentication
Overview
Requirements
Extended Character Sets
LDAP Directory Service
Upgrade Considerations
Configuring Directory Service Authentication
Source of Security Information
Internal Security
Active Directory Enhanced
Adding, Editing, or Removing an Active Directory Domain
Adding an Active Directory Domain
Editing an Active Directory Domain
Removing an Active Directory Domain
Migrating Users from Active Directory Basic to Active Directory Advanced
Mapping Active Directory Users and Groups
Creating and Mapping User Groups Directly from Active Directory Groups
Creating Users from Active Directory Users or Groups
Adding Users to Additional User Groups in Active Directory Enhanced
Creating Exclusions for User or Group Mappings in Active Directory Enhanced
Managing User Groups Manually
Removing Users and User Groups from Active Directory Enhanced Mappings
Additional Options for Active Directory Enhanced Authentication
Evaluating the Authentication of Active Directory Enhanced Users
Active Directory API Authentication Settings
LDAP Security
LDAP General Server Settings
Server Bind Method
User Mapping
Group Mapping
User and Group Association
Configuring Multiple LDAP Servers
Primary, Backup, and Disabled Servers
Exhaustive Searches
Windows Integration and Trusted Domains
Interactive User Authentication
Active Directory Username Mapping Attribute
Additional Information When Used with Active Directory Enhanced
Additional Considerations for LDAP Security
Synchronize User Attributes on Auto-Logon
Authentication Only on Auto-Logon
Synchronizing Users and User Groups
Integrating User Groups with Domain User Groups
Adding Users with LDAP
Adding Users with Active Directory Enhanced
Enabling Automatic Logins
Standard Client
Patient Window
Additional Active Directory Authentication Steps for Firefox
Unity Client
Modifying Configuration Files
Web Client
Modifying Configuration Files
Multiple Sites Configuration
Single Sign-On with Standard Authentication
EnableAutoLogin
forceSSOAutoLoginOverDomain
Required Configuration Settings for Non-Interactive Active Directory Authentication
Registering a Service Principal Name (SPN) and Configuring Delegation in Microsoft Windows
Configuring the Application Server
Configuring Web Applications
Additional Settings
Enforcing User Password Security
Understanding System Password Policies
Password Policies for Importing and Exporting Configuration Items
Creating a Password Policy
Copying Password Policies
Organizing Password Policies
Resetting All User Passwords
Additional Setting for the Web Server
Setting Access to the Application Pools
Opening Multiple Web Client Sessions
Configuring Active Directory Federation Services (AD FS)
Overview
Certificates Used and Key Locations
Licensing
Upgrade Considerations
Configuration
Configuring the AD FS Server
Adding a Relying Party Trust
Configuring AD FS Endpoints
Configuring the Application Server for AD FS
Configuring the Web Server for AD FS
HTTPS Certificate
Editing the Web.config File of the Web Server
Integrating With Domain User Groups
Configuring the Unity Client, MRM Unity Client, and Office Business Application for AD FS
Configuring Disconnected Scanning for AD FS
Configuring Patient Window for AD FS
Configuring Studio for AD FS
Configuring the Unity Management Console for AD FS
Configuring Report Services for AD FS
Troubleshooting
Logging Client Events to the Event Log
Verbose Logging on the AD FS Server
Common Errors Encountered When Using AD FS
A SignInResponse message may only redirect within the current application
Bootstrap Token was Empty
Client found response content type of text/html, but expected text/xml
Failed to connect. User '' does not belong to any user groups.
HTTP 400 Bad Request
Object not set for an instance of an object
OEM Authentication Failed
SAML Assertions are not included in token
The issuer of the security token was not recognized by the IssuerNameRegistry
The same client browser session has made X requests in the last Y seconds. Contact your administrator for details.
The type initializer for Hyland.Canvas.CanvasClientConfiguration threw an exception
This page cannot be displayed
Value cannot be null
Web Client displays a login page
Integration for Single Sign-On
Configuring Integration for Single Sign-On
Overview
Licensing
Limitations
Pre-Installation
Upgrade Considerations
Installation
Running the Installer
Deploying Integration for Single Sign-On
Direct Client/Server Model
Authentication Server Model
Web Server Configuration
App Server Configuration
Additional Configuration for Single Sign-On
Enabling Single Sign-On for the Web Server
Allowing Multiple Web Client Logins from the Same Workstation
Enabling Automatic User Creation with Single Sign-On
Synchronizing User Groups Via Active Directory
Web.Config Settings
Enable Auto Log In
Strip the Domain from a Username
Session Timeout
Redirect to Custom Page on Authentication Failure
Force SSO Auto Log In
Single Sign-On with Active Directory or LDAP Authentication
EnableAutoLogin
forceSSOAutoLoginOverDomain
SAML SSO Configuration
CAS SSO Configuration
Using Custom Authenticators
Enabling Custom Authenticators
Authentication Server Configuration Requirements
Configuring a Custom Authenticator
Enabling OnBase Entrust
.NET Requirements
OnBase Entrust Token Overview
Installing the Token Generator for Use with a LOB Application
Adding the Token Generator to a LOB Application
Token Generator Code Example
Configuring the Line-of-Business Application
Configuring
Configuring the Web Server
Asymmetric Token Type
Symmetric Token Type
Configuring the Application Server
Single Sign-On for PeopleSoft Enterprise
Single Sign-On for PeopleSoft Enterprise Overview
Upgrade Considerations
Requirements
Server Locations
PeopleSoft Configuration
Creating the PeopleSoft User Account
Creating the Permission List
Creating the Role
Creating the User
Configuring PeopleSoft to Create the SSO Authentication Token
Single Sign-On Configuration
Setup
Web Server and Application Server Configuration
Web.config Settings

Back to home page