Differences

This shows you the differences between two versions of the page.

--- technote:login_options [2021/08/19 00:34] – created Scott Cunliffe
+++ technote:login_options [2025/01/21 22:07] (current) – external edit 127.0.0.1
@@ Line 1: / Line 1: @@
 ====== Desktop Login Options ======
-===== Desktop Direct Login =====
+===== Desktop Direct Access =====
 Users can log directly into TapeTrack Desktop programs using a correct and active TapeTrack User-ID and Password.
-If a User attempts to login to TapeTrack with an incorrect password for more than five times consecutively, the User-ID will have access revoked.  To [[troubleshooting:login|regain access you will need to reset the User-ID password]].
+Native passwords are MD5 encoded and stored in the TapeTrack database in their encrypted format..
+To login directly you will need to [[master:user|create a User]] and password using the ''Group/User Administration'' window.
+<note>If a User attempts to login to TapeTrack with an incorrect password for more than five times consecutively, the User-ID will have access revoked.  To [[troubleshooting:login|regain access you will need to reset the User-ID password]].</note>
-===== Active Directory Login =====
+===== Active Directory Access =====
+Active Directory access gives a User the ability to login using their Active Directory credentials.
+When authenticating via Active Directory, the password sent to the TapeTrack Framework Server will then be sent to the Windows Domain Controller for authentication, for this reason the password can not be MD5 encoded.  When logging in using Active Directory, the ''No MD5'' checkbox on the login window mast be checked.
+{{no_md5.gif}}
+For this function to be accessible the TapeTrack User-ID must match their Active Directory user name and the Active Domain details entered in their User-ID identity tab in the field ''AD Domain''.
+If the field ''Require AD Group'' is set to ''False'' the User may login using either their Active Domain credentials or using their TapeTrack User-ID and password.  If the field ''Require AD Group'' is set to ''True'' the User can only login using their Active Domain credentials.
+{{active_domain_identity.png}}
+Image shows sample data to illustrate where to enter the required information for Active Directory authentication.  You will need to insert your information to create a successful connection.
+See [[master:user|Adding and Updating User Information]] for more detailed information on adding Users.
+===== Active Directory Group Access =====
+===== Kerberos Single Sign On =====
+Having Kerberos Single Sign On enabled will allow TapeTrack to automatically authenticate the User using Windows Active Domain credentials used to login to their computer without having to login to TapeTrack individually.
-===== Kerberos Single Sign on =====
+To enable Kerberos Single Sign On, when [[desktop:adding_connection|setting up the connection]] set ''Use Single-Sign-On'' field to ''True''.
+For this function to be accessible the TapeTrack User-ID must match their Active Directory user name and the Active Domain details entered in their User-ID identity tab in the field AD Domain.
+As this function is based on a connection setup for each client computer, it can be enabled or disabled per computer as required.
+{{sso.png}}
+See [[desktop:adding_connection|setting up the connection]] for more details on adding a new connection.
+{{tag> technote desktop master lite checkpoint connection}}