OnBase has a native authentication method and can also use Active Directory or LDAP to authenticate users. These standard authentication methods require no additional licensing, but Active Directory and LDAP do require additional configuration. This section briefly describes the standard authentication methods.
To use Active Directory authentication with the OnBase Web Server, see the topics in the Configuring Active Directory Federation Services chapter in this guide.
Internal security is the default authentication method and is enabled for all OnBase systems, unless it has been modified by accessing the Directory Service Authentication dialog box. With Internal security, users are authenticated using OnBase credentials and they are prompted for their credentials each time they log in.
Active Directory - Enhanced is a Windows-based integrated security method that provides control over domain group mapping. OnBase user rights are granted to the user based on the rights granted to the OnBase User Groups that the user's account or Active Directory group is mapped to. An Active Directory user or group can be mapped to one or more OnBase User Groups, and OnBase User Groups can be mapped to one or more Active Directory groups or users. This method can be configured to allow users to log in to OnBase automatically based on the credentials supplied when they logged in to their workstation, or to be prompted for those login credentials when accessing OnBase.
The Active Directory - Basic authentication method was removed after OnBase 18. Client logins attempting to use this method will fail in OnBase versions after 18. To continue using Active Directory to authenticate users, you must change the configuration to Active Directory Enhanced. The Auto-Configure Using Matching Group Names option is intended to assist in the migration from an existing Active Directory Basic authentication method to the Active Directory Enhanced method.
LDAP Security authenticates users in OnBase based on the user accounts on an LDAP server. Users are granted rights in OnBase based on their LDAP group memberships, which must correspond to OnBase User Groups. This method can be configured to allow users to log in to OnBase automatically based on the credentials supplied when they authenticated against the LDAP server, or to be prompted for those login credentials when accessing OnBase.