Security - Changing the Frontend Security Type

{"InSiteHeader":false,"IsEmptyControl":false,"ComponentEditMode":"none","IsDeniedAccess":false,"AppName":null,"IsAppDisabled":false}

{"IsVertical":false,"DisplayHomeLink":true,"HomeLinkText":"","HomeLinkURL":"","VerticalBarBehavior":"Default","NavCompulsoryLinkPosition":false,"SaveExpandedNavItems":false,"SetHorizontalNavTabsActive":false,"Title":"Global Horizontal Nav","InSiteHeader":false,"IsEmptyControl":false,"ComponentEditMode":"","IsDeniedAccess":false,"AppName":"Nav Editor","IsAppDisabled":false}

{"ShowBreadcrumb":true,"IsDateTitleVisible":false,"IsBreadcrumbDateVisible":false,"ShowBookmarkIcon":false,"BookmarkIconURL":"","ShowComments":false,"IncludeCommentHyperLink":true,"ShowStructureLink":false,"StructureLinkUrl":"/systemadmin/SiteContent.aspx","ShowUserProfileDetails":false,"ShowMyContentDetails":true,"ShowSearch":false,"UserProfileBreadcrumbBarOption":null,"ShowPublish":false,"ShowLibrary":false,"ManageCMSLink":"/systemadmin/SiteContent.aspx?index","ManageFilesLink":"/systemadmin/SiteContent.aspx?index","LinkSecurityEnabled":false,"ReadAccessToPublish":true,"DenyAccessToPublish":false,"ReadAccessToLibrary":true,"DenyAccessToLibrary":false,"ExternalLinkForPublish":false,"ExternalLinkForLibrary":false,"MyContentBreadcrumbBarOption":{"IsMyFormsVisible":false,"IsMyEventsVisible":false,"IsMyPagesVisible":true,"IsMustReadVisible":false,"IsMyFilesVisible":true,"IsMyContentVisible":false,"IsAssignNotificationsVisible":false,"IsManageMyNotificationsLinkVisible":false,"IsAnonymous":true,"InSiteHeader":false,"IsEmptyControl":false,"ComponentEditMode":"","IsDeniedAccess":false,"AppName":null,"IsAppDisabled":false},"InSiteHeader":false,"IsEmptyControl":false,"ComponentEditMode":"","IsDeniedAccess":false,"AppName":null,"IsAppDisabled":false}

{"BreadcrumbEntities":[{"breadcrumbEntityLink":"Home","breadcrumbEntityLinkURL":"/","breadcrumbEntityType":"","breadcrumbEntityLinkPartial":"","isCustomCrumb":true},{"breadcrumbEntityLink":"System Admin","breadcrumbEntityLinkURL":"/systemadmin/","breadcrumbEntityType":"IntranetDASHBOARD.Core.Subsite, Core","breadcrumbEntityLinkPartial":"","isCustomCrumb":false},{"breadcrumbEntityLink":"iD CMS","breadcrumbEntityLinkURL":"/systemadmin/sitecontent.aspx","breadcrumbEntityType":"IntranetDASHBOARD.idWiki.WikiCategory, WIKI","breadcrumbEntityLinkPartial":"","isCustomCrumb":false},{"breadcrumbEntityLink":"Security","breadcrumbEntityLinkURL":"/systemadmin/Security/","breadcrumbEntityType":"IntranetDASHBOARD.idWiki.WikiCategory, WIKI","breadcrumbEntityLinkPartial":"","isCustomCrumb":false},{"breadcrumbEntityLink":"Security - Changing the Frontend Security Type","breadcrumbEntityLinkURL":"/systemadmin/Security/ChangingtheFrontendSecurityType.html/","breadcrumbEntityType":"IntranetDASHBOARD.idWiki.WikiPage, WIKI","breadcrumbEntityLinkPartial":"","isCustomCrumb":false}],"DateToBeDisplayedAs":"Thursday, 25 April","BreadcrumbDate":"","DateTitleURL":"","ApplicationName":[],"UserManagerDetails":"","CommentsText":"Comments","NumberOfComments":0,"UserProfileBreadcrumbBarOutput":null,"MyContentBreadcrumbBarOutput":{"MyForms":"","MyFormsURL":"","MyEvents":"","MyEventsURL":"","MustRead":"","MustReadURL":"","ManageMyNotificationsLink":"","ManageMyNotificationsLinkURL":"/systemadmin/Notifications/default.aspx#jqTabs-3","MyContentURL":"","MyPagesURL":"/systemadmin/mypages.aspx","MyFilesURL":"/systemadmin/myfiles.aspx","UsersFullName":"Anonymous "}}

{"IsVertical":true,"DisplayHomeLink":true,"HomeLinkText":"System Admin","HomeLinkURL":"/systemadmin","VerticalBarBehavior":"Default","NavCompulsoryLinkPosition":false,"SaveExpandedNavItems":false,"SetHorizontalNavTabsActive":false,"Title":"System Admin V Nav","InSiteHeader":false,"IsEmptyControl":false,"ComponentEditMode":"","IsDeniedAccess":false,"AppName":"Nav Editor","IsAppDisabled":false}

{"IsVertical":true,"DisplayHomeLink":true,"HomeLinkText":"iD Applications","HomeLinkURL":"/applications","VerticalBarBehavior":"Default","NavCompulsoryLinkPosition":false,"SaveExpandedNavItems":false,"SetHorizontalNavTabsActive":false,"Title":"Applications V Nav","InSiteHeader":false,"IsEmptyControl":false,"ComponentEditMode":"","IsDeniedAccess":false,"AppName":"Nav Editor","IsAppDisabled":false}

Security: iD Authentication Options

Intranet DASHBOARD allows FOUR different authentication modes for accessing your site.

Topics

Authentication Modes

Setting Authentication Mode

Multiple Authentication Modes in iD

Authentication Modes

Login
Login On Demand
Active Directory
Login Using SAML

Login
All users must enter login details via a web-based form before they can access the website. Users must be added as Website Users in the Admin of Intranet DASHBOARD by an Administrator. No anonymous access will be available in this security mode.

Login On Demand
Website Users are created by the Administrator in the Admin although by default all users are first logged into the website anonymously. A user can login at any time (or be forced to login by an administrator) with their login details via a web-based form and then access secure areas restricted to their account.

Active Directory
When the web server is part of a Windows domain, domain user credentials are automatically passed to Intranet DASHBOARD for each new browsing session. Users may be part of the same domain or domains within the same 'forest'. Security can then be assigned to areas of the website based on AD users, groups, and domains. Users that are not part of the domain will be prompted to login (via a popup login prompt) and subsequently, users that are unable to login will be assigned 'anonymous' access.

(Note: The Active Directory option is only available if the server is a member of a Microsoft Active Directory domain)

Login Using SAML
When attempting to first access iD, Website Users will be redirected to the external site of the chosen Identity Provider (e.g. OneLogin, Okta etc.). After logging into the Identity Provider, the Website User will be redirected to the intranet. Instructions for configuring this option are provided below.

Setting the Authentication Mode

This process is conducted through The Admin console of iD and can only be performed by an Admin user with Superuser permission level.

The Frontend Security Type controls the way website users login to your intranet, follow the instructions below to set your Frontend Security mode.

Select Config Settings from the Utilities menu
Search for and select Frontend Security Type
Use the drop-down list to select the applicable security type; Login, LoginOnDemand, ActiveDirectory, LoginUsingSAML
If you have selected LoginUsingSAML there are further steps to complete this process, please see below
Once selected, click the Update button to save changes

In order to set up Login Using SAML, in addition to the previous steps, there are two other configuration settings to complete:

SAML Identity Provider SSO Target URL
The remote identity provider SSO URL that users will be redirected to in order to verify their identity
SAML Identity Provider Certificate
The certificate from the remote identity provider that is used to validate the SAML response received from them

Both these values can be taken from your Identity Provider, assistance provided below.

Go to the iD Admin> Utilities> Config Settings
In the Config Settings search for 'SAML Identity Provider SSO Target URL'
From your Identity Provider, copy the 'SAML Endpoint' URL as provided
Insert the SAML Endpoint URL into the Config Setting field
Select Update
Still in iD Admin> Utilities> Config Settings
In the Config Settings, search for SAML Identity Provider Certificate
From your Identity Provider, copy the X.509 Certificate as provided
Insert the X.509 Certificate text into the Config Setting field
Select Update

Once these configuration settings are completed, attempting to access the intranet URL will launch the Identity Provider login page. Once logged in, the user will be redirected to the intranet.

For steps on configuring specific SAML providers, see our SAML Configuration Guides

Can Intranet DASHBOARD Run in Multiple Authentication Modes?

There is the ability to run more than one authentication mode at a time within an Intranet DASHBOARD installation. This is based on the IP Address (or a defined IP range) of the workstation that the user is accessing the site from.

For example, if extranet access is required to the site then the installation can be set to run in ActiveDirectory mode for internal requests and Login mode for external requests.

Viewing: {SubsiteLink}

{UsersFullName}

{Profile Name}

Show older comments

Show newer comments

{Profile Name}

{Profile Name}

Show older comments

Show newer comments

{Title}
in {Category}

{Title}
in {SubCategory}

{Title}
in {Calendar name}

{Title}
in {Room}

{Title}
in {Folder name}

{Title}

{Title}
in {Application Name}

{Title}
in {Subsite iD CMS}

{Title}
in {Subsite iD CMS}

{Title}
in {iD CMS Folder}

Share this component
Share Name	*
Add this component to current template Note: You must save the page to Live for this to take effect

Viewing: {SubsiteLink}

{UsersFullName}

{Profile Name}

Show older comments

Show newer comments

{Profile Name}

{Profile Name}

Show older comments

Show newer comments

{Title} in {Category}

{Title} in {SubCategory}

{Title} in {Calendar name}

{Title} in {Room}

{Title} in {Folder name}

{Title}

{Title} in {Application Name}

{Title} in {Subsite iD CMS}

{Title} in {Subsite iD CMS}

{Title} in {iD CMS Folder}

{Title}
in {Category}

{Title}
in {SubCategory}

{Title}
in {Calendar name}

{Title}
in {Room}

{Title}
in {Folder name}

{Title}
in {Application Name}

{Title}
in {Subsite iD CMS}

{Title}
in {Subsite iD CMS}

{Title}
in {iD CMS Folder}