Authentication settings

You can configure your organization's authentication settings using the following options:

This area is only available if you are an administrator.

To open the Authentication settings page, click your profile icon to open the Settings page, and then click Authentication settings.

Native authentication

Native authentication is enabled by default on the Authentication settings page in new environments or when upgrading Hub.

To enable or disable native authentication:

  1. Use the slider to toggle to the required position:
    • Cross indicates off
    • Tick indicates on
  2. Click OK to accept the confirmation message.

You can only disable native authentication if there is at least one Hub administrator in the system who can sign in using one of the other authentication methods.

You can add native users on the Add user page and they can log into Hub by entering their username and password.

Active Directory authentication

Active Directory authentication can only be enabled on the Authentication Settings page if the server hosting Authentication Server is a member of an Active Directory domain.

To enable or disable Active Directory authentication:

  1. Use the slider to toggle to the required position:
    • Cross indicates off
    • Tick indicates on
  2. Click OK to accept the confirmation message.

Once enabled, you can add Active Directory users on the Add user page and they can log into Hub directly using the Log in using Active Directory option.

This does not apply to LDAP users who will still be required to enter their credentials.

Active Directory domains

You can view, add, edit, and delete Active Directory domains and associated credentials stored in the Authentication Server database via the Active Directory domains page, accessible by clicking View domains on the Authentication settings page.

For more information, see Active Directory domains.

Active Directory user management

If Active Directory authentication has been enabled on the Authentication settings page, you must select how to manage access for Active Directory users in Hub by enabling at least one of the following options on the Authentication settings page:

  • Allow authorization via Active Directory security group membership – Enables Active Directory security groups to be added to Hub roles. Users can be assigned to multiple Hub roles by being a member of any Active Directory security groups associated with those roles.
  • Allow Active Directory users to be added directly to roles – Enables Active Directory users to be directly assigned to Hub roles. Users can be assigned to multiple Hub roles.

For details on how to assign Active Directory users and security groups to roles, see Roles and permissions.

Watch this video for an overview of Active Directory integration with Authentication Server.

LDAP

At least one LDAP connection must be configured before adding LDAP users to Hub. If there are no LDAP users in the system, either native or Active Directory authentication must be enabled, and at least one Hub administrator configured to use the enabled authentication type must be kept in the system.

For details on how to configure a connection and add LDAP users to Hub, see LDAP.