Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Authentication Providers

PermissionsSyndeia Cloud includes a configurable choice of Authentication Identity Providers for the users of the Syndeia Web Dashboard.

An Identity Provider is a repository of User Profiles for individuals that are recognized by the organization. Common Identity Providers include Microsoft Active Directory, OpenLDAP servers, numerous SAML2 IdPs, and Social Networking services such as Google, GitHub, and LinkedIn.

Syndeia Cloud v3.5 and later allows an organization to choose one or more of the following Identity Providers:

  • Local
    Syndeia acts as its own Identity Provider

  • LDAP
    Syndeia delegates authentication requests to an LDAP server that is available on the corporate network

  • Secure LDAP
    Syndeia delegates authentication requests to a Secure LDAP server – a server that is using SSL for its LDAP URLs – that is available on the corporate network

  • Microsoft AD
    Using either the LDAP or the Secure LDAP configuration, Syndeia delegates authentication requests to a Microsoft Active Directory server that is available on the corporate network

  • SAML2
    Syndeia delegates authentication requests to the organization’s choice of SAML2 Identity Provider such as Ping Federate or Okta.

Authentication Provider Configuration Guides

Roles and Grants

Syndeia Cloud's user management system with permissions to allow/offers roles to grant or deny various operations which include:  

  • user read (enumeration of user list)

  • user creation (signup),

  • user modification (ie: update to assign permissions or change/reset passwords), and 

  • user remove (currently implemented by "disabling" to prevent any breakage of historical references) 

...

Administrator Access

A Syndeia Cloud installation allows offers at least one super-user administrator account. The initial setting for the administrator account is name: super.user and password: syn45ia

To prevent accidental system lock-outs, the designated super user account cannot be deleted. 

...

(warning) We strongly recommend changing the username and password from the default.  

Usage

There is now one web-based interface for managing users in Syndeia Cloud.  See the following page for more information on basic usage for User Management:  

...