Users can log directly into TapeTrack Desktop programs using a correct and active TapeTrack User-ID and Password.

Native passwords are MD5 encoded and stored in the TapeTrack database in their encrypted format..

To login directly you will need to create a User and password using the Group/User Administration window.

Active Directory access gives a User the ability to login using their Active Directory credentials.

When authenticating via Active Directory, the password sent to the TapeTrack Framework Server will then be sent to the Windows Domain Controller for authentication, for this reason the password can not be MD5 encoded. When logging in using Active Directory, the No MD5 checkbox on the login window mast be checked.

For this function to be accessible the TapeTrack User-ID must match their Active Directory user name and the Active Domain details entered in their User-ID identity tab in the field AD Domain.

If the field Require AD Group is set to False the User may login using either their Active Domain credentials or using their TapeTrack User-ID and password. If the field Require AD Group is set to True the User can only login using their Active Domain credentials.

Image shows sample data to illustrate where to enter the required information for Active Directory authentication. You will need to insert your information to create a successful connection.

See Adding and Updating User Information for more detailed information on adding Users.

Having Kerberos Single Sign On enabled will allow TapeTrack to automatically authenticate the User using Windows Active Domain credentials used to login to their computer without having to login to TapeTrack individually.

To enable Kerberos Single Sign On, when setting up the connection set Use Single-Sign-On field to True.

For this function to be accessible the TapeTrack User-ID must match their Active Directory user name and the Active Domain details entered in their User-ID identity tab in the field AD Domain.

As this function is based on a connection setup for each client computer, it can be enabled or disabled per computer as required.

See setting up the connection for more details on adding a new connection.